Cybersecurity Compliance Analyst

Job Description

Job Description

Job Title: Cybersecurity Compliance Analyst Job Description

The Cybersecurity Compliance Analyst supports U.S. Government and enterprise cybersecurity initiatives by executing Department of Defense (DoD) Risk Management Framework (RMF) activities, maintaining authorization packages, and driving Cybersecurity Maturity Model Certification (CMMC) readiness for systems that process, store, transmit, or protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). In this role, you partner closely with system owners, engineers, program leadership, and business stakeholders to translate security requirements into practical, evidence-based controls and sustainable compliance practices.

• Support the full DoD RMF lifecycle, including system categorization, control selection, implementation, assessment, authorization, continuous monitoring, and other related RMF activities as required.
• Develop, maintain, and quality-check RMF authorization artifacts such as System Security Plans (SSPs), Security Assessment Plans and Reports (SAPs/SARs), Plans of Action and Milestones (POA&Ms), risk assessments, and continuous monitoring documentation, ensuring all authorization and compliance documentation is complete and accurate.
• Perform CMMC Level 2 readiness and gap assessments against NIST SP 800-171 Rev. 2 requirements, validate supporting objective evidence, and track identified corrective actions through closure.
• Help define and maintain the CMMC assessment scope, including the CUI environment, asset inventory, data flows, network diagrams, external connections, security protection assets, specialized assets, and applicable third-party services.
• Assess security controls and technical implementations across endpoints, servers, networks, applications, identity services, and cloud or hybrid environments, documenting deficiencies, associated risk, and recommended remediation steps.
• Coordinate vulnerability management and configuration compliance activities, including review of scan results, validation of secure configurations, remediation tracking, exception analysis, and support for risk acceptance decisions.
• Maintain compliance evidence in authorization repositories, ensuring artifacts are current, traceable, review-ready, and aligned with control requirements and assessment objectives.
• Prepare teams for customer reviews, Security Control Assessor activities, Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) reviews, Certified Third-Party Assessor Organization (C3PAO) assessments, and internal audits by coordinating evidence requests, interviews, demonstrations, and follow-up actions.
• Provide cybersecurity risk consultation to system owners, engineers, and business stakeholders and contribute to the development and maintenance of policies, standards, procedures, and security awareness content.
• Develop compliance metrics and status reports that clearly communicate control effectiveness, open risks, POA&M progress, assessment readiness, and continuous monitoring results to both technical and non-technical audiences.

• Working knowledge of CMMC, including NIST SP 800-171 Rev. 2, FCI/CUI safeguarding requirements, and applicable DoD cybersecurity clauses and policies.
• Minimum of 3 years of progressive experience in cybersecurity, information assurance, RMF, audit, or compliance supporting U.S. Government or DoD environments.
• Hands-on experience supporting DoD RMF and Assessment and Authorization (A&A) activities.
• Demonstrated experience assessing and documenting compliance with CMMC Level 2 and NIST SP 800-171 requirements.
• Working knowledge of the DoD RMF, including NIST SP 800-37 and NIST SP 800-53 Rev. 5 requirements.
• Experience evaluating security controls, collecting and validating objective evidence, documenting findings, and working with control owners to remediate deficiencies.
• Knowledge of vulnerability management, secure configuration, identity and access management, audit logging, incident response, and continuous monitoring practices.
• Ability to present cybersecurity and compliance matters clearly and confidently to technical teams, program leadership, customers, and assessors.
• Ability to manage multiple priorities, maintain accurate records, exercise sound judgment, and work effectively in a collaborative, deadline-driven environment.
• Active CompTIA Security+ certification.
• Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Engineering, or a related technical discipline.
• Ability to obtain an active Secret security clearance.

• Experience using eMASS or a comparable governance, risk, and compliance platform to manage control implementation, authorization artifacts, risk registers, workflows, and POA&Ms.
• Knowledge of FedRAMP requirements, cloud security best practices, Zero Trust principles, third-party risk management, and shared responsibility models for cloud and hybrid environments.
• Professional certifications such as ISC2 CISSP, ISC2 ISSEP, ISC2 CCSP, or another recognized cloud security certification.
• CMMC Certified Professional (CCP) or CMMC Certified Assessor (CCA) credential, or progress toward these certifications.
• Strong analytical and problem-solving skills, with the ability to interpret complex regulatory and technical requirements and translate them into actionable controls.
• Effective written communication skills for producing clear security documentation, reports, and authorization artifacts.

This role follows a hybrid work model with three days per week in the office, providing regular in-person collaboration with cybersecurity, engineering, and program teams. You work in a structured, compliance-focused environment that supports U.S. Government and DoD programs, with access to modern security tools and authorization repositories such as eMASS or comparable platforms. The setting is deadline-driven and highly collaborative, emphasizing clear communication, thorough documentation, and adherence to established security policies and procedures. Office attire is typically professional, suitable for interactions with internal stakeholders and external assessors.

This is a Contract to Hire position based out of Orlando, FL.

The pay range for this position is $53.00 - $67.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: • Medical, dental & vision • Critical Illness, Accident, and Hospital • 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available • Life Insurance (Voluntary Life & AD&D for the employee and dependents) • Short and long-term disability • Health Spending Account (HSA) • Transportation benefits • Employee Assistance Program • Time Off/Leave (PTO, Vacation or Sick Leave)

This is a hybrid position in Orlando,FL.

This position is anticipated to close on Sep 2, 2026.

About Actalent

Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email View email address on ziprecruiter.com for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.