Security Compliance Analyst - U.S. Citizenship Required

Security Compliance Analyst - U.S. Citizenship Required Category: Cyber Security Main location: United States, Virginia, Fairfax Alternate Location(s): United States, Louisiana, Lafayette Position ID: J0426-0893 Employment Type: Full Time Position Description CGI Federal is hiring a Security Compliance Analyst to support a skilled and motivated team of ISSOs on a high‑visibility program. The role focuses on improving the cybersecurity posture of civilian government agencies through the implementation and enhancement of a cybersecurity platform and the delivery of integration services. You will also assist in developing additional cybersecurity offerings focused on next‑generation security solutions and technologies. Your future duties and responsibilities Support ISSO team activities related to continuous monitoring and ongoing security compliance Conduct security control assessments in alignment with NIST RMF (SP 800‑53, 800‑37) and federal security requirements Support the development and execution of security impact assessments to evaluate system changes and their effect on system risk posture Assist with maintaining and updating system security documentation, including SSPs, POA&Ms, and security control evidence Perform routine security reviews, vulnerability tracking, and control assessments Help evaluate system categorization and control selection in alignment with FIPS 199 and NIST RMF guidelines Coordinate with technical teams to gather security evidence and ensure continuous monitoring requirements are met Track and report on security risks, remediation progress, and compliance status Support preparation for audits, assessments, and internal security reviews Participate in the system lifecycle process by integrating NIST 800‑37 Risk Management Framework activities into appropriate phases Conduct risk and vulnerability assessments related to system architecture changes Required qualifications to be successful in this role U.S. citizenship and successful completion of a CGI background check before beginning work Ability to obtain and maintain a DHS CISA EOD/Public Trust clearance Bachelor's degree and up to five years of experience supporting cybersecurity teams for enterprise cybersecurity shared services programs or cloud programs Experience with continuous monitoring for moderate- and high‑impact systems Working knowledge of NIST Special Publications 800‑series (800‑37, 800‑53, 800‑18, 800‑30, 800‑137) Knowledge of Federal Information Processing Standards (FIPS), especially FIPS 199 If no NIST experience, working knowledge of the DoD Information Technology Security Certification and Accreditation Process (DITSCAP) or DoD Information Assurance policy 8500.1 and the RMF If no NIST or DITSCAP experience, working knowledge of NSA Information Assurance processes Understanding of IT security principles, concepts, policies, and regulations Ability to effectively document security controls Proficiency with Microsoft Word, Excel, and Microsoft Project Desired qualifications Prior experience supporting an ISSO or security compliance team Experience with continuous monitoring and cATO activities Familiarity with security tools such as vulnerability scanners, SIEM platforms, or configuration management solutions Exposure to cloud environments (AWS, Azure, or GCP) and related security requirements Understanding of FedRAMP, FISMA, or agency‑specific compliance frameworks Technical background supporting interpretation of control implementations or system architecture Experience with CISA’s Continuous Diagnostics and Mitigation (CDM) program Skills English Information Assurance NIST Security Architecture Technical Writing Benefits Competitive compensation (range: $79,600.00 - $194,000.00) Comprehensive insurance options Matching contributions through the 401(k) plan and the share purchase plan Paid time off for vacation, holidays and sick time Paid parental leave Learning opportunities and tuition assistance Wellness and well-being programs EEO Statement Qualified applicants will receive consideration for employment without regard to their race, ethnicity, ancestry, color, sex, religion, creed, age, national origin, citizenship status, disability, pregnancy, medical condition, military and veteran status, marital status, sexual orientation or perceived sexual orientation, gender identity, gender expression, familial status, reproductive health decisions, political affiliation, genetic information, height, weight, or any other legally protected status or characteristics to the extent required by applicable federal, state, and/or local laws where we do business. Accessibility and Accommodation CGI provides reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to apply for a job in the U.S., please email the CGI U.S. Employment Compliance mailbox at View email address on click.appcast.io . You will need to reference the Position ID of the position in which you are interested. All CGI offers of employment in the U.S. are contingent upon the ability to successfully complete a background investigation. Background investigation components can vary dependent upon specific assignment and/or level of US government security clearance held. CGI will consider for employment qualified applicants with arrests and conviction records in accordance with all local regulations and ordinances. #J-18808-Ljbffr CGI Technologies and Solutions, Inc.