***Remote opportunity with occasional on-site meetings at NOAA/NMFS offices in Silver Spring, MD.

Position Overview

We are seeking a Junior Systems Analyst / Security Compliance Auditor to support ongoing cybersecurity and compliance initiatives for a federal IT environment. This role will focus on ensuring that IT systems, applications, and infrastructure maintain continuous compliance with federal cybersecurity mandates, agency-specific policies, and internal security standards.

The ideal candidate will assist in maintaining a mature and effective security compliance program by supporting audits, conducting security assessments, reviewing policies, and providing recommendations to strengthen the organization's overall cybersecurity posture.

Key Responsibilities

Security Compliance & Audit Support

Assist in developing and executing a comprehensive IT security audit program designed to evaluate compliance across systems, applications, and infrastructure.
Perform technical security assessments, configuration compliance reviews, and vulnerability assessments in accordance with federal security requirements.
Support continuous monitoring efforts to ensure systems remain compliant with applicable cybersecurity regulations and security baselines.

Policy Review & Process Improvement

Review existing IT security policies, procedures, and documentation to evaluate effectiveness and identify areas for improvement.
Provide recommendations to strengthen internal security controls and ensure alignment with federal regulations, agency requirements, and industry best practices.
Assist in maintaining and updating compliance documentation, security procedures, and audit artifacts.

Reporting & Risk Management

Document audit findings and security assessment results in detailed reports for management review.
Identify security vulnerabilities, compliance gaps, and potential risks, while providing actionable remediation recommendations.
Support tracking and follow-up of remediation activities to ensure timely resolution of identified issues.

Cybersecurity Compliance Support

Provide support in interpreting and applying federal cybersecurity compliance frameworks and standards.
Assist with compliance activities related to:

Federal Information Security Modernization Act (FISMA)
NIST Risk Management Framework (RMF)
Privacy Act compliance requirements
Agency-specific cybersecurity and privacy policies

Collaborate with internal teams to ensure security controls are implemented and maintained in accordance with federal standards.

Required Qualifications

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent professional experience).
1–3 years of experience supporting IT systems administration, cybersecurity, security compliance, or audit activities.
Basic understanding of federal cybersecurity frameworks including NIST RMF, FISMA, and security compliance standards.
Experience with JCAM application designed to help federal agencies streamline compliance, security, and authorization processes is preferred.
Experience performing vulnerability assessments, system security reviews, or compliance audits.
Ability to analyze technical security findings and communicate recommendations clearly.
Strong written communication skills with experience preparing technical reports and documentation in Word or PowerPoint format.
Ability to work independently while collaborating effectively within a team environment.