{"id":2471827,"url":"https://alion.io/job/aptnexus-cybersecurity-compliance-analyst-ii","title":"Cybersecurity Compliance Analyst II","company":{"id":4423852,"name":"APTNEXUS","domain":"aptnexus.com","url":"https://alion.io/company/aptnexus","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":80000,"max":100000,"currency":"USD","period":"year","gross":null,"usd_annual":100000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-07T21:54:27Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-23T04:58:47Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"About APTNEXUS\nSince our founding 2012, APTNEXUS has empowered federal agencies and commercial enterprises to navigate the complexities of the digital landscape. As a quality-driven small business, we specialize in the seamless delivery of IT modernization and elite cybersecurity solutions. We help our clients modernize and fortify their technology stacks -ensuring their most critical data and assets remain resilient, optimized, and secure in an evolving threat environment.\nClearance:\nAbility to obtain and maintain a Minimum Background Investigation (MBI) for our Department of Treasury customer. Candidates must reside in, and perform all work from, the continental United States or its outlying territories.\nLocation:\nRemote (United States)\nWork Schedule:\nFull-time, remote. Must be available during core business hours (Eastern Time) to support stakeholder calls and submission deadlines. Occasional travel may be required.\nSalary Range:\n$80,000 to $100,000 annually, commensurate with experience\nPosition Overview:\nAptNexus is seeking a Cybersecurity Compliance Analyst II to support a cybersecurity compliance program for our Department of Treasury customer. The program oversees the protection of sensitive federal data held by federal, state, and local government organizations, which submit corrective action plans, system security plans, technical inquiries, and change notifications for review. In this role, you will independently evaluate these submissions against security requirements tailored from NIST SP 800-53, handle the more complex reviews, and help guide other analysts toward consistent, well-supported determinations. The ideal candidate is a detail-oriented self-starter who can manage a steady volume of reviews with consistency and precision.\nDuties/Responsibilities:\nEvaluate corrective action plans and POA&Ms submitted by partner organizations, including supporting evidence such as screenshots, audit logs, and policy documents, and determine whether each finding is open or closed.\nRecommend follow-on actions required to close open findings, and address questions and statements raised in partner organization responses.\nReview system security plans and related compliance submissions against applicable NIST controls, identify compliance status, and articulate applicable requirements.\nPrepare written responses to technical inquiries on topics such as multifactor authentication, cloud configuration, and control implementation, and participate in follow-up calls as needed.\nEvaluate advance notifications of planned changes, such as cloud adoption, contractor access, and test environments, and provide written cybersecurity guidance.\nRequest clarification or additional documentation from partner organizations when submissions are incomplete, and track responses to closure.\nTrack assigned reviews, due dates, and turnaround to meet customer deadlines.\nUse and help maintain standardized templates and Excel-based tools, including VBA macros, that support consistent and efficient reviews.\nIndependently perform complex reviews, including significant and critical findings and full system security plan reviews, with minimal oversight.\nPerform peer review of Level I analyst work, and provide guidance on control requirements and consistent determinations.\nMaintain complete and accurate records of all correspondence and documentation in the customer’s case management system.\nComply with all customer security, privacy, and records management requirements, using only Government-furnished equipment and approved systems.\nRequired Skills\nThree to five years of experience in cybersecurity compliance, audit, or assessment, including direct experience evaluating POA&Ms, system security plans, or control evidence.\nDemonstrated experience, whether professional, internship, or academic, identifying and applying information security or cybersecurity requirements.\nWorking knowledge of NIST SP 800-53 and the NIST Risk Management Framework, including how security controls are implemented and evidenced.\nAbility to read technical evidence, such as configuration screenshots, audit logs, and policy documents, and judge whether a control requirement has been met.\nFamiliarity with common technologies that drive compliance questions, including cloud services, multifactor authentication, encryption, operating systems, and network devices.\nStrong technical writing skills, with the ability to produce clear, consistent, and well-supported written determinations.\nProficiency with Microsoft Word and Excel; experience with VBA macros is preferred.\nDetail-oriented self-starter who takes ownership of assignments, manages competing priorities, and drives work to completion with minimal supervision.\nPreferred Certifications (not required):\nCompTIA Security+ CE\nCompTIA Cybersecurity Analyst (CySA+)\nSystems Security Certified Practitioner (SSCP)\nGIAC Security Essentials Certification (GSEC)\nCertified in Governance, Risk and Compliance (CGRC, formerly CAP)\n\nStrong written and verbal communication skills, with a professional and courteous approach to partner organizations and customer personnel.\nSound professional judgment, objectivity, and integrity in handling sensitive information.\nMust meet federal eligibility requirements for a position of public trust, including U.S. citizenship or lawful permanent residency, federal tax compliance, Selective Service registration (if applicable), a credit check, and fingerprinting.\nMust complete customer-required security awareness training upon onboarding and annually thereafter.\nEducation Requirement:\nAssociate’s degree or higher from a minimum two-year information technology or cybersecurity program at an accredited college or university. Candidates with a high school diploma and one of the certifications listed above will also be considered. A bachelor’s degree in information technology, cybersecurity, information systems, or a related field is preferred.\nAptNexusis an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.","description_format":"text","description_chars":6203,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Compliance","Government"],"lifecycle":[{"event":"open","at":"2026-10-13T20:04:28Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.799,"p_room":0.9,"age_days":15,"expected_fill_days":23,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":100000,"is_top_pay":false},"html_url":"https://alion.io/job/aptnexus-cybersecurity-compliance-analyst-ii","json_url":"https://alion.io/job/aptnexus-cybersecurity-compliance-analyst-ii.json","meta":{"generated_at":"2026-10-23T06:22:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10358,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423852},"rest":"https://alion.io/mcp/rest/get_company?id=4423852"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faptnexus-cybersecurity-compliance-analyst-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faptnexus-cybersecurity-compliance-analyst-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faptnexus-cybersecurity-compliance-analyst-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aptnexus-cybersecurity-compliance-analyst-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faptnexus-cybersecurity-compliance-analyst-ii"}]}