Information Assurance and Compliance Analyst

Role Overview

Information Assurance and Compliance Analyst for a cybersecurity team, supporting development, implementation, and maintenance of security policies and compliance frameworks. The role is 100% remote for select locations, with a potential hybrid schedule for candidates in the Chicago, IL metro area. Support includes GovCloud/FedRAMP-related requirements.

Responsibilities

• Develop and implement cybersecurity policies aligned with NIST CSF and government standards such as IL5 and FedRAMP High
• Manage and maintain compliance with government security standards across both technical and non-technical requirements
• Define data classification and data protection requirements for IT systems
• Collaborate cross-functionally to integrate cybersecurity policies into business operations
• Educate employees on privacy protections and security restrictions (training and communications)
• Review and update cybersecurity policies to reflect evolving regulations and industry best practices
• Support the Approval to Operate (ATO) process by ensuring systems meet required security standards
• Troubleshoot policy implementation issues and improve security controls
• Stay current on industry trends in cybersecurity policy and regulatory compliance

Requirements

• 4+ years experience developing, implementing, and managing cybersecurity policies
• Strong understanding of cybersecurity frameworks with hands-on NIST Cybersecurity Framework (CSF) experience in enterprise environments
• Experience achieving and maintaining high-level security compliance including DoD IL5, FedRAMP High, SOC 2, and ISO
• Experience creating data classification policies and defining data protection requirements
• Strong knowledge of AWS
• U.S. Citizenship required due to GovCloud and FedRAMP involvement

Nice to Have

• Practical ability to translate framework guidance into actionable security strategies
• Experience supporting ATO processes in government-oriented environments