Draft, review, and update System Security Plans (SSPs) for multiple program enclaves
Ensure SSP accuracy, completeness, and alignment with NIST 800-171 requirements
Coordinate and facilitate pre-audit evidence collection activities across program teams
Organize and catalog compliance artifacts, policies, procedures, and technical documentation
Conduct inventory data collection and validation to meet audit minimum requirements
Support implementation of NIST 800-171 controls across organizational enclaves
Facilitate integration of COREnet SSPs for CMMC inheritance objectives
Provide regular status updates to program managers and compliance leadership
Support internal and external audit activities as compliance liaison

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Business Administration, or related field
Minimum 3-5 years of experience in cybersecurity compliance, IT audit, or risk management
Demonstrated experience with compliance frameworks, preferably NIST 800-171, NIST 800-53, or similar federal standards
Experience with System Security Plan (SSP) development or documentation
Proven track record in pre-audit preparation and evidence gathering activities
Working knowledge of NIST 800-171 security controls and requirements
Understanding of cybersecurity principles, risk management, and control frameworks
Familiarity with federal compliance requirements (FISMA, FedRAMP, CMMC, or similar)
Experience with compliance documentation tools and systems
Exceptional written and verbal communication skills
Strong organizational skills with keen attention to detail
Ability to manage multiple priorities and deadlines simultaneously
Collaborative mindset with ability to work across technical and non-technical teams
Proficiency in Microsoft Office Suite, particularly Excel and Word
Clearance and Citizenship: U.S. Citizenship required

Cybersecurity Compliance Analyst – ISO Audit Support

Key skills