{"id":3118838,"url":"https://alion.io/job/noblis-information-system-security-compliance-analyst-multiple-levels","title":"Information System Security Compliance Analyst (Multiple Levels)","company":{"id":8012,"name":"Noblis","domain":"noblis.org","url":"https://alion.io/company/noblis","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Legal","role_family":"Legal","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":78900,"max":218475,"currency":"USD","period":"year","gross":null,"usd_annual":218475},"salary_estimate":null,"experience_years_min":16,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Office","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T20:58:34Z","employer_posted_date":null,"last_verified_at":"2026-10-22T20:58:34Z","board_verified":false,"closed_at":null,"days_open":9,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":9},"description":"Responsibilities\n\nPosition OverviewWe are seeking a detail-oriented cybersecurity compliance professional to support system authorization and continuous monitoring activities within a Federal environment. This role is responsible for managing the security authorization lifecycle for one or more information systems, ensuring compliance with Federal cybersecurity requirements, and maintaining the documentation necessary to support Authorization to Operate (ATO) decisions.\nThe ideal candidate will have experience working with NIST RMF, NIST SP 800-53 controls, security authorization packages, POA&M management, and compliance documentation. Candidates should be comfortable working with technical teams to assess control implementation, identify compliance gaps, and provide guidance to support remediation efforts and POA&M closure.\nKey Responsibilities\nManage the security authorization lifecycle for one or more information systems in accordance with Federal Risk Management Framework (RMF) requirements.\n\nCoordinate activities required to obtain and maintain Authorization to Operate (ATO) approvals.\n\nAssess and track implementation of NIST SP 800-53 security controls and associated compliance requirements.\n\nDevelop, review, update, and maintain authorization package documentation, including:\n\nSystem Security Plans (SSPs)\n\nSecurity Assessment Reports (SARs)\n\nPlan of Action and Milestones (POA&Ms)\n\nRisk Assessments\n\nContinuous Monitoring documentation\n\nSecurity-related policies and procedures\n\nManage POA&M activities by tracking findings, monitoring remediation progress, validating corrective actions, and supporting closure efforts.\n\nProvide technical guidance and compliance recommendations to system owners, engineers, administrators, and security stakeholders to facilitate POA&M remediation and closure.\n\nCoordinate with technical teams to gather evidence supporting security control implementation and compliance requirements.\n\nReview vulnerability scan results, assessment findings, and security documentation to identify compliance gaps and areas requiring remediation.\n\nSupport continuous monitoring activities by tracking security posture, compliance status, and ongoing control effectiveness.\n\nParticipate in security assessments, audits, and compliance reviews conducted by internal and external stakeholders.\n\nAssist in the development of risk mitigation strategies and recommendations for addressing identified security weaknesses.\n\nTrack authorization milestones, compliance deadlines, and remediation activities to ensure timely completion.\n\nCommunicate compliance status, risks, findings, and recommendations to both technical and non-technical stakeholders.\n\nSupport audits and reporting activities related to Federal cybersecurity requirements and organizational security programs.\n\nRequired Qualifications\n\nExperience supporting cybersecurity compliance, security authorization, risk management, or information security programs.\n\nExperience working with the NIST Risk Management Framework (RMF).\n\nSubject matter expertise with NIST SP 800-53 security controls and Federal cybersecurity compliance requirements.\n\nExperience supporting the development, maintenance, or review of authorization package documentation, including SSPs, SARs, POA&Ms, and Risk Assessments.\n\nUnderstanding of the Authorization to Operate (ATO) process and continuous monitoring requirements.\n\nExperience tracking and managing POA&M findings through remediation and closure.\n\nAbility to review technical security information and translate findings into compliance documentation and actionable recommendations.\n\nUnderstanding of cybersecurity principles, security controls, vulnerability management, and risk management concepts.\n\nStrong organizational skills with the ability to manage multiple systems, priorities, and compliance activities simultaneously.\n\nStrong written and verbal communication skills, including the ability to develop and review formal security documentation.\n\nProficiency with Microsoft Office applications, particularly Excel, Word, and PowerPoint.\n\nU.S. Citizen or Green Card Permanent Resident with a minimum of three (3) years of U.S. residency.\n\nAbility to obtain and maintain an FAA Public Trust.\n\nEducation & Experience SubstitutionsSubstitutions are subject to government customer review and approval.\nMid\n\nBachelor’s degree in Cybersecurity, Information Technology, Telecommunications, or a related field.\n\n9+ years of experience in cybersecurity or network security roles\n\nSubstitutions: For anything requiring a substitution, the government customer is subject to further review and either approve or deny the request.\n\nA High School degree with a total of 15 years of experience in cybersecurity or network security roles\n\nMasters degree with a total of 6 years of experience in cybersecurity or network security roles.\n\nCompensation Ranges: for D.C., NJ, Remote: $78,900 - $123,300 \nMid to Senior: \n\nBachelor’s degree in Cybersecurity, Information Technology, Telecommunications, or a related field.\n\n12+ years of experience in cybersecurity or network security roles\n\nSubstitutions: For anything requiring a substitution, the government customer is subject to further review and either approve or deny the request.\n\nA High School degree with a total of 16 years of experience in cybersecurity or network security roles\n\nAn Associates Degre with a total of 14 years of experience in cybersecurity or network security roles\n\nMasters degree with a total of 9 years of experience in cybersecurity or network security roles\n\nCompensation Ranges: for D.C., NJ, Remote: $95,500 - $180,525 \nSenior\nMasters degree in Cybersecurity, Information Technology, Telecommunications, or a related field.\n\n16+ years of experience in cybersecurity or network security roles\n\nSubstitutions: For anything requiring a substitution, the government customer is subject to further review and either approve or deny the request.\n\nA Bachelors degree with a total of 19 years of experience in cybersecurity or network security roles\n\nCompensation Ranges: for D.C., NJ, Remote:$115,500 - $218,475\n\nDesired Qualifications\n\nExperience supporting federal government programs, preferably within the FAA, Department of Transportation, or other civilian federal agencies.\n\nFAA or transportation sector experience preferred.\n\nExperience serving as an Information System Security Officer (ISSO), Security Control Assessor (SCA), Information System Security Manager (ISSM), or similar cybersecurity compliance role.\n\nExperience managing authorization packages for multiple systems simultaneously.\n\nStrong knowledge of NIST SP 800-53 Rev. 5, NIST RMF, FISMA, and related Federal cybersecurity requirements.\n\nExperience developing, reviewing, and maintaining SSPs, SARs, POA&Ms, Risk Assessments, Contingency Plans, and other authorization artifacts.\n\nExperience conducting control assessments, compliance reviews, and security documentation audits.\n\nAbility to interpret technical findings from vulnerability scans, configuration assessments, and security reviews to support risk-based decision-making.\n\nExperience providing technical guidance to engineering and operations teams to support corrective actions and POA&M closure.\n\nFamiliarity with continuous monitoring programs and ongoing authorization requirements.\n\nExperience working with vulnerability management tools, compliance dashboards, and governance, risk, and compliance (GRC) platforms.\n\nKnowledge of cloud security compliance, Zero Trust Architecture, and modern Federal cybersecurity initiatives.\n\nIndustry certifications such as:\n\nCISSP\n\nCAP (Certified Authorization Professional)\n\nSecurity+\n\nCISM\n\nGSLC\n\nCGRC\n\nor equivalent certifications\n\nStrong written, verbal, analytical, and interpersonal communication skills, with the ability to interact effectively with technical teams, auditors, system owners, and government stakeholders.\n\nOverview\n\nNoblis and our wholly owned subsidiaries, Noblis ESI, and Noblis MSD tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us\nWhy work at a Noblis company?Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards. Noblis maintains a drug-free workplace.\n*Remote/hybrid status is subject to change based on Noblis and/or government requirements\n\nCommitment to Non-Discrimination\nAll qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.\nIf reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us.\nEEO is the Law | E-Verify | Right to Work\n\nTotal Rewards\nAt Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.\nCompensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis’ total compensation package.\n\nPosted Salary Range\n\nUSD $78,900.00 - USD $218,475.00 /Yr.Originally posted on Himalayas","description_format":"text","description_chars":11026,"description_truncated":false,"requirements":{"experience_years_min":16,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Research Institutes"],"lifecycle":[{"event":"open","at":"2026-10-22T23:28:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":8,"expected_fill_days":30,"reasons":["seen:8","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":218475,"is_top_pay":false},"html_url":"https://alion.io/job/noblis-information-system-security-compliance-analyst-multiple-levels","json_url":"https://alion.io/job/noblis-information-system-security-compliance-analyst-multiple-levels.json","meta":{"generated_at":"2026-11-01T00:07:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":238,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8012},"rest":"https://alion.io/mcp/rest/get_company?id=8012"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnoblis-information-system-security-compliance-analyst-multiple-levels"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnoblis-information-system-security-compliance-analyst-multiple-levels"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnoblis-information-system-security-compliance-analyst-multiple-levels"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/noblis-information-system-security-compliance-analyst-multiple-levels\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnoblis-information-system-security-compliance-analyst-multiple-levels"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3118838}},{"tool":"search_jobs","arguments":{"company":"noblis.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3118838},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}