Systems Analyst / Security Compliance Auditor

Work arrangement

• Remote opportunity with occasional on-site meetings at NOAA/NMFS offices in Silver Spring, Maryland.

Position overview

Security compliance and audit support

• Assist in developing and executing IT security audits across systems, applications, and infrastructure.
• Conduct technical security assessments, configuration compliance reviews, and vulnerability assessments against federal requirements.
• Support continuous monitoring against applicable cybersecurity regulations and security baselines.

Policy, reporting, and risk management

• Review IT security policies, procedures, and documentation for effectiveness and improvement opportunities.
• Recommend controls aligned with federal regulations, agency requirements, and industry best practices.
• Maintain compliance documentation, security procedures, and audit artifacts.
• Document audit and assessment findings in detailed reports for management.
• Identify vulnerabilities, compliance gaps, and risks; recommend remediation and track follow-up.

Federal cybersecurity compliance

• Interpret and apply federal cybersecurity frameworks and standards, including FISMA, NIST RMF, Privacy Act requirements, and agency-specific policies.
• Collaborate with internal teams to ensure security controls are implemented and maintained in accordance with federal standards.

Required qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent professional experience.
• 1–3 years of experience supporting IT systems administration, cybersecurity, security compliance, or audit activities.
• Basic understanding of NIST RMF, FISMA, and security compliance standards.
• Experience performing vulnerability assessments, system security reviews, or compliance audits.
• Ability to analyze technical security findings and communicate recommendations clearly.
• Strong written communication and experience preparing technical reports and documentation in Word or PowerPoint.
• Ability to work independently and collaborate effectively within a team.

Preferred qualification

• Experience with JCAM, an application designed to support federal agency compliance, security, and authorization processes, is preferred.