Security & Compliance Analyst

• Ensure compliance with DoD identity governance policies regulatory frameworks and cybersecurity best practices.
• Conduct security assessments and audits to verify adherence to NIST 800-53 Rev. 5 FedRAMP DoD IL-4/IL-5 security mandates and Risk Management Framework (RMF) guidelines.
• Maintain System Security Plan (SSP) Security Assessment Reports (SAR) and other documentation supporting the Authority to Operate (ATO) process.
• Provide oversight of security controls related to IAM data protection and cloud security configurations.
• Produce the Security Compliance & Audit Report documenting compliance gaps remediation actions and assessment results.

• Possess the knowledge and capability to assess implement and monitor security compliance frameworks across cloud and hybrid environments ensuring adherence to FedRAMP NIST 800-53 Rev. 5 DoD RMF and Zero Trust security principles.
• Proficient in security risk assessment compliance reporting and vulnerability remediation strategies.
• Demonstrated experience in conducting security assessments preparing compliance documentation (SSPs POA&Ms) and ensuring regulatory adherence for cloud and hybrid infrastructures. Proficiency with compliance tools such as Microsoft Purview AWS Security Hub Nessus or Splunk Enterprise Security is required.

• Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP) or CompTIA Security.

ABOUT NALLEY CONSULTING

Nalley Consulting is a Service Disabled Veteran Owned Small Business working with prime partners to staff Department of Defense and Intelligence Community positions. Created by a U.S. Navy intelligence veteran Nalley Consulting has grown to include multiple IDIQ vehicles in several states.

Nalley Consulting fringe benefits include:

• Excellent medical dental and vision benefits
• PTO
• 11 paid federal holidays
• Tuition assistance
• Paid military-reserve leave
• Paid parental leave for birth or adoption
• 401k matching up to 5 percent of the base salary
• Flex time
• Company-paid short-term disability long-term disability and life insurance.