Cybersecurity Compliance Analyst I

APTNEXUS delivers IT modernization and cybersecurity solutions for federal agencies and commercial enterprises. The Cybersecurity Compliance Analyst I will support a Department of Treasury cybersecurity compliance program by reviewing submissions against NIST requirements, making compliance determinations, providing written guidance, and tracking reviews through closure.

What you'll do:

• Evaluate corrective action plans and POA&Ms submitted by partner organizations, including supporting evidence such as screenshots, audit logs, and policy documents, and determine whether each finding is open or closed
• Recommend follow-on actions required to close open findings, and address questions and statements raised in partner organization responses
• Review system security plans and related compliance submissions against applicable NIST controls, identify compliance status, and articulate applicable requirements
• Prepare written responses to technical inquiries on topics such as multifactor authentication, cloud configuration, and control implementation, and participate in follow-up calls as needed
• Evaluate advance notifications of planned changes, such as cloud adoption, contractor access, and test environments, and provide written cybersecurity guidance
• Request clarification or additional documentation from partner organizations when submissions are incomplete, and track responses to closure
• Track assigned reviews, due dates, and turnaround to meet customer deadlines
• Use and help maintain standardized templates and Excel-based tools, including VBA macros, that support consistent and efficient reviews
• Maintain complete and accurate records of all correspondence and documentation in the customer’s case management system
• Comply with all customer security, privacy, and records management requirements, using only Government-furnished equipment and approved systems

What they're looking for:

• Ability to obtain and maintain a Minimum Background Investigation (MBI) for our Department of Treasury customer
• One to three years of experience in cybersecurity compliance, audit, assessment, or a related information security role
• Demonstrated experience, whether professional, internship, or academic, identifying and applying information security or cybersecurity requirements
• Working knowledge of NIST SP 800-53 and the NIST Risk Management Framework, including how security controls are implemented and evidenced
• Ability to read technical evidence, such as configuration screenshots, audit logs, and policy documents, and judge whether a control requirement has been met
• Familiarity with common technologies that drive compliance questions, including cloud services, multifactor authentication, encryption, operating systems, and network devices
• Strong technical writing skills, with the ability to produce clear, consistent, and well-supported written determinations
• Proficiency with Microsoft Word and Excel
• Detail-oriented self-starter who takes ownership of assignments, manages competing priorities, and drives work to completion with minimal supervision
• Strong written and verbal communication skills, with a professional and courteous approach to partner organizations and customer personnel
• Sound professional judgment, objectivity, and integrity in handling sensitive information
• Must meet federal eligibility requirements for a position of public trust, including U.S. citizenship or lawful permanent residency, federal tax compliance, Selective Service registration (if applicable), a credit check, and fingerprinting

Benefits:

• Remote work in the United States
• Full-time employment
• Use of Government-furnished equipment and approved systems
• Customer-required security awareness training upon onboarding and annually thereafter