Cybersecurity Compliance Analyst

TechAxia LLC is hiring a Cybersecurity Compliance Analyst in Colorado Springs, CO (onsite) to help keep Microsoft 365 GCC High environments secure and audit-ready. This role combines recurring compliance execution, remediation documentation, and security operations support, with additional responsibility as a backup Microsoft 365 administrator for the GCC High managed services team. Salary range: USD 55,000 - 70,000 per year.

Responsibilities

• Run recurring cybersecurity maintenance checklists (weekly through annual) across TechAxia and client environments, documenting each task accurately.
• Monitor threat intelligence sources including CISA / US-CERT bulletins and Microsoft Defender Vulnerability Management; assess impact and open or track remediation tickets.
• Review audit logs, alerts, and incidents across Microsoft Sentinel, Microsoft Defender, and Intune, following established incident response procedures.
• Verify endpoint log ingestion and SIEM health, and reconcile device inventory in Entra ID against authorized hardware.
• Manage account lifecycle activities, including least-privilege reviews, disabling or deleting stale accounts, and maintaining up-to-date account-management records.
• Support CMMC / NIST SP 800-171 assessments, Change Advisory Board (CAB) meetings, and periodic reviews of policies, procedures, and risk assessments.
• Maintain accurate compliance documentation, including hardware/software inventories, System Security Plan, and POA&M inputs.
• Serve as a backup Microsoft 365 administrator for the GCC High managed services team.

Requirements

• Due to federal contract requirements, applicants must be U.S. citizens.
• 2+ years of experience in IT security operations, systems administration, or IT compliance.
• Hands-on Microsoft 365 administration experience with Entra ID / Azure AD, Microsoft Defender, and Intune / Endpoint Manager.
• Working familiarity with NIST SP 800-171 and/or CMMC.
• Exceptional attention to detail and disciplined documentation habits.
• Comfort working through ticketing or service-request systems and following written procedures.
• Self-directed, dependable, and able to manage recurring workload without close supervision.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401(k)
• Paid time off
• Professional development assistance
• Certification support for Microsoft and CMMC

Growth opportunity

Support professional development, including CMMC Certified Professional (CCP) training and certification. Over time, the role may expand to increased client-facing responsibilities, potentially including guiding clients through the path from initial gap assessment through certification and ongoing maintenance.

Preferred qualifications

• Experience with Microsoft 365 GCC High or GCC (government cloud).
• Microsoft Sentinel or other SIEM experience.
• Relevant certifications such as CompTIA Security+, SC-200, SC-300, MS-102, AZ-500, or CISSP.
• Prior experience at an MSP or MSSP.
• Eligible to obtain a U.S. security clearance.
• Familiarity with the Defense Industrial Base and DFARS/CMMC requirements.

Key technologies

Microsoft 365 GCC High, Microsoft 365 GCC, Microsoft Defender Vulnerability Management, Microsoft Sentinel, Microsoft Defender, Intune, Endpoint Manager, Entra ID, Azure AD, System Security Plan, POA&M, CISA / US-CERT bulletins, Change Advisory Board (CAB), NIST SP 800-171, and CMMC.