What are the responsibilities and job description for the Compliance Analyst position at TechSur Solutions?
Job Details
Job Title: Compliance Analyst
Location: Reston, VA TechSur HQ Office (3x/week)
Salary: DOE full benefits
Clearance: Active Public Trust (or ability to obtain)
Company Overview
TechSurSolutions is a digital services company whose mission is to enable digital transformation for our customers improving quality and efficiency.Based in the DC metropolitan area,TechSurspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.Since we were formed inAugust of2016,we have supported multiple impactful and excitinggovernment programs.
Job Description
We are seeking a detail-oriented and knowledgeable Compliance Analyst to support our organization's security and compliance initiatives. The ideal candidate will have experience in technology analysis, security compliance, federal frameworks such as NIST, governance, and policy development. This role will ensure that our company adheres to relevant regulations and industry standards, mitigating risks while enhancing operational efficiency.
Job Responsibilities
Conduct compliance assessments and audits to ensure adherence to federal security frameworks, including NIST 800-53, NIST 800-171, FISMA, FedRAMP, and other applicable regulations.
Analyze security policies, procedures, and controls to identify gaps and recommend improvements.
Develop and implement compliance strategies and governance policies aligned with industry s best practices.
Monitor and evaluate changes in federal regulations, cybersecurity guidelines, and risk management frameworks.
Assist in the creation and maintenance of security documentation, including policies, procedures, and standards.
Collaborate with IT, Security, and Legal teams to ensure compliance with applicable security and technology regulations.
Support risk assessments, audits, and corrective action plans to address compliance deficiencies.
Provide compliance training and awareness programs for employees and stakeholders.
Assist in third-party risk management by evaluating vendor security compliance and governance requirements.
Prepare reports and documentation for internal and external stakeholders, ensuring transparency in compliance efforts.
Required Skills/Qualifications
3 years of experience in compliance analysis, information security, or related fields.
Strong understanding of federal security frameworks (e.g., NIST, FedRAMP, FISMA, ISO 27001, CIS controls).
Experience in governance, risk, and compliance (GRC) tools and methodologies.
Familiarity with security technologies such as SIEM, endpoint protection, access control, and vulnerability management.
Strong analytical and problem-solving skills with attention to detail.
Excellent written and verbal communication skills, with the ability to create policy documentation and reports.
Ability to work independently and collaboratively with cross-functional teams.
Preferred Experience
Relevant certifications such as CISA, CISM, CISSP, CRISC, or Security .
Experience working in a federal contracting environment.
Knowledge of cloud security compliance frameworks (AWS, Azure, or Google Cloud)
Education
Bachelor s degree in information security, Computer Science, Risk Management, or a related field.
Years of experience can be considered in lieu of degree
