Infosec Compliance Analyst

Information Security Compliance Analyst

Atlanta, GA

Hybrid role

Starting at $45 an hour

ABOUT THE ROLE

Our client, a Fortune 500 company, is seeking a motivated and detail-oriented Information Security Compliance Analyst to join their Information Security - Governance, Risk & Compliance team in Atlanta, GA. This hands-on role is responsible for supporting established IT compliance, audit, and control-assurance activities, including control testing, evidence collection, compliance documentation, audit coordination, and special projects. The analyst will work closely with the Information Security Compliance Lead and various stakeholders to execute established priorities, processes, and strategic direction. The ideal candidate is adept at managing competing assignments, communicating clearly, and delivering dependable, actionable work products while operating effectively within an established team structure. A hybrid work schedule may be available following the initial onboarding period, depending on business needs, role requirements, and individual performance.

WHAT YOU'LL DO

• Support internal and external IT audits, compliance assessments, and control-testing activities
• Collect, organize, validate, and interpret control evidence and supporting documentation
• Assist with evaluating controls against applicable requirements, including NIST SP 800-171
• Draft, update, and maintain policies, procedures, control narratives, and compliance documentation
• Identify documentation or evidence gaps and coordinate with control owners to address them
• Support the development and maintenance of System Security Plans, when applicable
• Research regulatory and compliance requirements and summarize findings for leadership and business stakeholders
• Assist with tracking remediation activities, audit findings, control deficiencies, and corrective-action plans
• Partner with information security, technology, risk, audit, and business teams to complete assigned compliance initiatives
• Provide consistent project support while following established governance processes and team direction
• Participate in special projects and support the team in executing against strategic direction

WHAT YOU BRING

• Experience supporting IT audits, security compliance, risk management, or control-assurance activities
• Understanding of audit methodology, control design, control testing, and evidence validation
• Experience collecting and evaluating evidence and artifacts for audits or assessments
• Working knowledge of NIST SP 800-171 requirements
• Experience with one or more security or compliance frameworks, such as PCI DSS, NIST, ISO 27001, SOC, or similar standards
• Ability to draft and interpret policies, procedures, control documentation, and audit responses
• Strong written and verbal communication skills across multiple organizational levels
• Ability to research complex requirements and communicate concise, actionable findings
• Strong organizational skills and the ability to manage multiple priorities and deadlines
• Ability to work independently while collaborating effectively with the team and following established direction
• General understanding of IT and information-security domains, including network architecture and cloud computing
• Experience with U.S. Government contractor or Defense Industrial Base compliance requirements (preferred)
• Familiarity with Cybersecurity Maturity Model Certification requirements (preferred)
• Experience developing or maintaining System Security Plans (preferred)
• Familiarity with NIST SP 800-53 controls and TSA Joint Emergency Amendment 23-01 (preferred)
• Practical experience conducting IT audits or formal control assessments (preferred)
• Experience working in the aviation or another highly regulated industry (preferred)
• Understanding of enterprise-level and domain-level security requirements and controls (preferred)
• Relevant certifications such as CISSP, CISA, CRISC, or other audit, risk, cybersecurity, or compliance certifications (desired)

#LI-KS2