Role Summary

Security Compliance Analyst

This role supports the Division of Federal Systems for the Office of Child Support Enforcement by helping manage security compliance for systems and services that exchange sensitive child support information with federal, state, tribal, and external partners.

The analyst will coordinate security reviews, support external audits, advise teams on federal security requirements, contribute to continuous monitoring, and strengthen incident response readiness for FPLS systems and partner environments.

Key Responsibilities

• Conduct and coordinate security reviews, audits, site assessments, and documentation reviews for data exchange partners.
• Support federal audit activities, evidence collection, auditor responses, corrective action planning, and remediation tracking.
• Provide security compliance guidance aligned with federal mandates, OMB and NIST guidelines, and HHS/ACF/FPLS requirements.
• Participate in continuous monitoring through lifecycle reviews, risk assessments, vulnerability testing, control validation, and security documentation.
• Support incident response for sensitive data events, safeguarding violations, cybersecurity events, notifications, reporting, and lessons learned.
• Help maintain security policies, procedures, playbooks, governance documentation, awareness materials, and compliance review processes.

Required Experience and Skills

• At least 2 years of professional cybersecurity experience.
• Strong written and verbal communication skills for audit reports, assessment findings, executive briefings, and formal security documentation.
• Ability to manage multiple priorities independently in a customer-focused, high-pressure environment.
• Experience collaborating with technical teams, leadership, external partners, auditors, and oversight organizations.
• Knowledge of information assurance principles, risk and vulnerability assessments, compliance reviews, and security-related documentation.

Preferred Qualifications

• Experience with frameworks or requirements such as NIST SP 800-53, NIST SP 800-171, FISMA, IRS Publication 1075, or comparable standards.
• Governance, risk, and compliance experience, including corrective action management, continuous monitoring, audit readiness, and security documentation.
• Cybersecurity incident response experience, including triage, impact analysis, containment, remediation, recovery, and post-incident reporting.
• Security or IT certifications such as CISSP or CISA, knowledge of child support enforcement systems, or experience handling sensitive personally identifiable information.

View Full Job Description