layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Cybersecurity Compliance Analyst at RCG | LAYIQ

Cybersecurity Compliance & Continuous Monitoring
Provide day-to-day cybersecurity compliance and systems-analysis support to assigned ISSOs and FISMA systems.
Prepare, maintain, and update Continuous Monitoring schedules, trackers, packages, and supporting documentation.
Collect, organize, review, and track security-control evidence and supporting artifacts for recurring compliance activities.
Maintain compliance calendars, action-item logs, deliverable trackers, and status reports for ISSO review.
Identify missing, overdue, or incomplete compliance requirements and escalate risks, deficiencies, or schedule concerns to the ISSO.
Support recurring compliance meetings, cybersecurity data calls, assessment activities, and status reporting.
Security Control Assessments & Audit Readiness
Prepare Security Control Assessment documentation and evidence packages.
Coordinate security-control evidence and artifact requests with system and technical stakeholders.
Maintain assessment trackers and document outstanding evidence requests.
Track SCA findings through remediation and closure.
Review cybersecurity documentation and supporting artifacts for completeness, consistency, currency, and readiness for Government or assessor review.
Support audit and assessment readiness by maintaining complete, current, and traceable documentation and evidence for internal and external reviews, assessments, inspections, and authorization activities.
RMF, A&A & Security Documentation
Support NIST Risk Management Framework (RMF) and Assessment & Authorization (A&A)/Authority to Operate (ATO) activities.
Develop, update, and perform quality reviews of cybersecurity documentation, including:
System Security Plans (SSPs)
FIPS 199/200 documentation
Risk assessments
Security-control implementation statements
Authorization artifacts
Review system Change Requests and support the preparation and tracking of Security Threshold Analysis (STA) and Security Impact Analysis (SIA) documentation.
Coordinate updates to cybersecurity documentation resulting from system or configuration changes.
Maintain accurate cybersecurity records and compliance information in JSAM and other Government-designated repositories and tracking tools.
POA&M & Vulnerability Remediation
Support the creation, maintenance, and status tracking of Plans of Action and Milestones (POA&Ms).
Track remediation activities, supporting evidence, milestones, and closure documentation.
Review vulnerability findings and track patching, configuration hardening, and remediation activities.
Coordinate with technical teams to obtain supporting evidence demonstrating remediation.
Ensure applicable POA&M records and supporting documentation remain accurate and current for ISSO review.
Stakeholder Coordination
Coordinate with ISSOs, System Owners, engineers, system administrators, and other technical stakeholders to obtain required compliance documentation and evidence.
Track outstanding actions and follow up with responsible stakeholders to ensure compliance deadlines are met.
Communicate compliance status, outstanding requirements, and potential schedule concerns clearly and accurately.
Provide organized and timely information to support ISSO decision-making and Government reporting requirements.

Cybersecurity Compliance Analyst

Employer job description

What You'll Do

Requirements

What We're Looking For

Preferred Qualifications

Benefits

About this listing