Security & Compliance Analyst

Location: Chicago, IL Duration: Full-Time / Long Term Contract with potential extension. About The Role We’re looking for an experienced Security & Compliance Analyst to help keep a large, regulated technology environment secure, compliant, and audit‑ready. You’ll monitor and assess security controls, maintain compliance documentation, and work across security, IT, and delivery teams to make sure standards are not just written down but actually met. This is a hands‑on role for someone who thinks in terms of controls, evidence, and continuous improvement. What You’ll Do Conduct periodic security control assessments aligned to NIST 800-53. Review, maintain, and update system security plans and compliance documentation. Monitor access logs and coordinate vulnerability scans across systems and applications. Support audit readiness and reporting activities, including FedRAMP. Track and support remediation of Plan of Action and Milestones (POA&M) findings. Validate identity and access governance controls and support access management reviews. Communicate risks, gaps, and remediation status clearly to both technical teams and leadership. The Ideal Security & Compliance Analyst Detail‑oriented and thorough: meticulous with controls, evidence, and documentation, ensuring nothing slips through the cracks. A clear communicator: translates technical risk and compliance findings into plain language that both engineers and leadership can act on. Audit and evidence‑minded: keeps the environment audit‑ready at all times with traceability. Proactive and risk‑aware: anticipates gaps and raises issues early, rather than reacting after something goes wrong. Collaborative: works across security, IT, and delivery teams to get controls implemented, not just recommended. High integrity: trusted with sensitive data and holds the line on standards, even under pressure. What You Bring Bachelor’s degree in Cybersecurity, IT, or a related field. 5+ years in security compliance and risk management (senior‑level). Working knowledge of NIST800-53, HIPAA, FedRAMP, and FERPA standards. Experience with security control assessments, system security plans, and POA&M remediation. Strong written and verbal communication skills. Nice to Have FedRAMP audit‑readiness and reporting experience. Familiarity with identity and access management (IAM) and identity governance (IGA) platforms (e.g., Okta, SailPoint). Healthcare, Medicaid, or public‑sector compliance experience. Relevant certifications (e.g., CISA, CISSP, Security+). #J-18808-Ljbffr