Regulatory Compliance

Regulatory Compliance Cybersecurity Jobs

6 jobs found

5d ago

Cybersecurity Analyst

Stratus Services, LLC Anchorage, AK

Anchorage, AK

5d ago

$65k - $85k/yr Full time Azure Virtual Desktop Cloud Platforms Cloud Security

Apply Now

Job Description

Stratus Services, LLC is seeking a Cybersecurity Analyst to support cybersecurity and compliance work, with an emphasis on CMMC and NIST-based frameworks. This onsite role in Anchorage, AK focuses on helping assess, implement, and sustain security controls across internal systems and client environments to support federal and industry compliance expectations.

In this position, you will collaborate across Microsoft cloud and endpoint security capabilities, supporting day-to-day operations while contributing to documentation and evidence readiness. The goal is to keep security controls current, troubleshoot issues, and escalate complex matters to senior engineers with clear context.

Responsibilities

Support and administer Azure environments, including VMs, virtual networks, storage, Entra ID, and resource groups across client tenants
Manage Intune device enrollment, configuration profiles, compliance policies, and app deployments, including troubleshooting when deployments do not behave as expected
Support Microsoft Defender for Endpoint, including onboarding devices, monitoring alerts, and escalating or resolving issues as appropriate
Assist with Azure Virtual Desktop operations such as session host management, FSLogix profile troubleshooting, and image updates
Assist with Conditional Access and MFA configuration and troubleshooting in Entra ID
Write basic PowerShell scripts for routine tasks and use existing automation for repetitive work
Document configurations, update runbooks, and maintain current records
Escalate complex issues to senior engineers with organized notes on what has already been attempted

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
CompTIA Security+ (required) or equivalent certification
1–3 years of experience in cybersecurity, IT security, or compliance-related roles
Basic understanding of risk management principles
Familiarity with security tools including SIEM, endpoint protection, vulnerability scanners, and MFA solutions
Strong analytical, organizational, and documentation skills
Excellent written and verbal communication skills

Technologies

Azure, VMs, virtual networks, storage, Entra ID, resource groups
Intune, Microsoft Defender for Endpoint, Azure Virtual Desktop, FSLogix
Conditional Access, MFA, PowerShell
CMMC (Cybersecurity Maturity Model Certification), NIST SP 800-171

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Vision insurance

Preferred Qualifications

CompTIA CySA+, GSEC, or similar certification
Experience supporting DoD contractors or federal compliance requirements
Knowledge of Microsoft 365 security tools (Defender, Sentinel, Intune, etc.)
Experience with audit preparation and evidence collection
Familiarity with NIST SP 800-171 or CMMC framework

Core Competencies

Attention to detail
Problem-solving mindset
Strong ethical standards and integrity
Ability to manage multiple tasks and deadlines
Team-oriented with client-facing professionalism

Compensation: USD 65,000 - 85,000 per year.

Experience Level: Minimum 1 year.

Certification: CompTIA Security+ (required) or equivalent.

View full job page →

17d ago

Industrial Security Analyst

Northrop Grumman Roy, UT

Roy, UT

17d ago

$66k - $98k/yr Full time Data Security Data Transfer Document Control

Apply Now

Job Description

Industrial Security Analyst role with Northrop Grumman on the Sentinel (GBSD) program in Roy, Utah, focusing on building security programs, handling classified materials, and ensuring alignment with DoD and NISPOM requirements. USD 65,500 - 98,300 per year.

Responsibilities

Support a fast paced, high profile program by building, maintaining, and leveraging relationships with internal and external customers.
Design and administer security programs and procedures for classified or proprietary materials, documents, and equipment.
Lead security education sessions and conduct security audits to verify program compliance.
Assist with media issuance, accountability, and destruction or serve as a Data Transfer Agent as needed.
Act as the central point for receiving, processing, distributing, and controlling all classified documentation (hard copy and electronic media) entering or leaving the facility.
Analyze, investigate, and resolve classified security issues while guiding employees, supervisors, and managers on actions to ensure adherence to the security program.
Submit, review, and verify Visit Requests by querying government security databases and systems.
Provide subject matter expertise in security functions for DoD SAP Security per DoD Manual 5205.07 volumes 1 through 4, the National Industrial Security Program Operating Manual (NISPOM), and related regulations.
Ensure compliance with government and corporate security policies and procedures across programs.
Manage and maintain access control, including UL-2050 compliant intrusion detection systems and automated access control systems.
Adhere to contractual guidance for classified programs and cleared facilities per DD Form 254 guidance.
Assist program managers and staff in interpreting and applying Security Classification Guides to maintain compliance.

Requirements

A bachelor’s degree with at least 2 years of experience; or a master’s degree with 0 years of experience; or a high school diploma or equivalent with 6 years of related education and/or experience.
Active DoD Top Secret security clearance at time of application, current and within scope, with the ability to obtain and maintain SCI approval/access.
Demonstrated, relevant security experience with industrial security programs within the Intelligence Community.

Technologies

MS Office (Word, Excel, PowerPoint)
SharePoint
JIRA
SIMS
NISS
DISS
UL-2050 compliant Intrusion Detection Systems (IDS)
Automated Access Control Systems (ACS)

Benefits

Medical, Dental & Vision coverage
401k
Educational Assistance
Life Insurance
Employee Assistance Programs and Work/Life Solutions
Paid Time Off
Health and Wellness Resources
Employee Discounts

Relocation Assistance

Relocation assistance may be available

Clearance

Clearance required for start: Yes
Clearance type: Top Secret

Travel

Yes, 10% of the time

View full job page →

21d ago

Cybersecurity Specialist #580

Photo-Sonics Chatsworth, CA

Chatsworth, CA

21d ago

$58 - $68/hr Full time Cmmc Controls Cybersecurity Tools Data Security

Apply Now

Job Description

This Cybersecurity Specialist role protects Photo-Sonics’ systems, networks, and data, ensures compliance with federal requirements for a government defense contractor, and leads CMMC activities onsite in Chatsworth, CA.

Responsibilities

Lead a cross‑functional team to achieve Cybersecurity Maturity Model Certification (CMMC).
Drive the development, deployment, and ongoing governance of the organization’s cybersecurity strategy aligned with CMMC requirements.
Continuously monitor network activity with SIEM tools to detect anomalies and unauthorized access.
Conduct security assessments and simulated attacks to identify vulnerabilities before exploitation.
Act as the incident response lead during breaches, contain threats, coordinate data recovery, and minimize downtime.
Advise leadership on risk management, security procedures, and regulatory compliance for data protection.
Implement defensive controls such as firewalls, data encryption, and timely software patching.
Maintain security documentation and update the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) as needed.
Communicate security matters clearly with employees, vendors, and customers.
Oversee IT asset inventory to ensure compliance.
Protect highly confidential information and shield internal users from external threats, including hackers and malware.
Serve as a backup to the IT team for IT support duties.
Perform other duties as assigned.

Requirements

Bachelor’s Degree
Systems Security Certified Practitioner (SSCP) certification required
5+ years of recent, relevant experience
Working knowledge of CMMC, NIST SP 800-171, DFARS 252.204-7012, and FAR 52.204-21

Technologies

Security Information and Event Management (SIEM)
Intrusion Detection Systems (IDS)
Firewalls
Proxies
VPNs
TCP/IP
Routing
Switching
Data encryption

Benefits

401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Life insurance
Parental leave
Vision insurance

Education

Bachelor’s Degree
Systems Security Certified Practitioner (SSCP) certification required
Certified Information Systems Security Professional (CISSP) certification preferred

Experience

5+ years of recent, relevant experience
Working knowledge of CMMC, NIST SP 800-171, DFARS 252.204-7012, and FAR 52.204-21

Desired Skills

Research, analyze, and interpret data on emerging cyber threats, attack vectors, and trends
Proficiency in computer networks, operating systems, security software, and hardware
Strong grasp of TCP/IP, VPNs, routing, and switching; ability to configure and manage firewalls, IDS, and proxies
Provide quick identification and resolution of security incidents
Assess threats, evaluate risks, and devise effective solutions
Automate security tasks and understand attacker code
Understand CMMC to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI)
Stay current with evolving cyber threats and adversarial tactics
Excellent organizational and follow‑up skills for handling multiple projects
Ability to work with minimal supervision
Excellent verbal and written communication
Proficient in Word and Excel
Strong analytical skills
Professional written and spoken communication
Ability to work overtime as needed

Preferred Skills

Knowledge of DFARS and mandatory incident reporting
Security implementation experience
Strong communication, instructional design, and threat awareness to educate employees
Policy development, risk assessment, and regulatory knowledge

Physical Requirements

Ability to walk, sit, talk, and hear; stand and use hands to reach, handle, or feel
Occasional climbing or balancing in lab or field environments
May lift up to 15 lbs and stand/walk for extended periods

Work Location

In person

View full job page →

1mo ago

Cybersecurity Consultant-Japanese Bilingual

PASONA N A, INC. New York, NY

New York, NY

1mo ago Closed

$120k - $150k/yr Full time Cis Controls Cloud Platforms Cmmc Controls

This position is no longer accepting applications (closed Aug 9, 2026).

Job Description

The Cybersecurity Consultant role supports Japanese multinational organizations operating in North America by assessing cyber risk, strengthening governance, and shaping strategic roadmaps. The position may function as a Virtual Chief Information Security Officer for select clients.

Key Responsibilities

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps that align with organizational objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity initiatives
Conduct cybersecurity risk assessments and control evaluations
Perform readiness assessments and gap analyses against frameworks and regulatory requirements such as NIST CSF, ISO 27001/27002, NYDFS Part 500, HIPAA Security Rule, CMMC, SOC 2, and CIS Controls
Develop remediation plans and implementation recommendations
Serve as a trusted cybersecurity advisor for organizations without dedicated security leadership
Participate in executive meetings and annual cybersecurity program reviews
Support governance and strategic decision-making processes
Review and recommend target-state architectures across IAM, SSO, MFA, Network Security, Endpoint Protection, Cloud Security, and Data Protection & DLP
Align cybersecurity programs with modernization and digital transformation initiatives
Provide executive-level post-incident guidance and recommendations
Facilitate root-cause analyses and lessons-learned sessions
Assist with regulatory notification considerations and remediation planning
Build long-term trusted relationships with executive stakeholders
Present findings and recommendations to senior leadership teams and boards
Coordinate with delivery, engineering, and customer success teams to ensure effective execution of advisory recommendations
Contribute to methodology development, service innovation, and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and cybersecurity awareness programs

Required Qualifications

Minimum 10 years of experience in cybersecurity, information risk management, IT governance, security consulting, or related advisory disciplines
Minimum 5 years in a senior consulting, cybersecurity leadership, risk advisory, governance, or Virtual CISO role
Experience advising executive stakeholders including CIOs, CISOs, Boards, Audit Committees, and Executive Leadership Teams
Working knowledge of NIST CSF
Working knowledge of ISO 27001/27002
Working knowledge of NYDFS Part 500
Working knowledge of HIPAA Security Rule
Working knowledge of CMMC
Working knowledge of CIS Controls
Understanding of enterprise cybersecurity architecture and technology domains, including IAM, SSO, MFA
Cloud Security experience (AWS, Azure, Microsoft 365)
Network Security, Endpoint Security
Vulnerability Management and Data Protection

Technologies

AWS
Azure
Microsoft 365
NIST Cybersecurity Framework (CSF)
ISO 27001/27002
NYDFS Part 500
HIPAA Security Rule
CMMC
CIS Controls
SOC 2
Identity and Access Management (IAM)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Cloud Security
Data Protection
Data Loss Prevention (DLP)
Vulnerability Management
Network Security
Endpoint Security

Benefits

Benefits package
Visa and relocation support

Location

New York, NY (Hybrid)
Hybrid work arrangement with approximately 2–3 days per week in the office
Periodic travel within the United States for customer engagements, with occasional international travel as needed

Language Requirements

Japanese: Native or Business Professional Proficiency (Required)
English: Business Professional Proficiency (Strongly Preferred)

Position Overview

We seek an experienced Senior Cybersecurity Consultant to join a growing advisory practice supporting Japanese multinational enterprises across North America. The role acts as a trusted adviser to executive leadership, helping clients assess risk, fortify governance programs, enhance regulatory readiness, and build strategic roadmaps. The successful candidate will engage directly with CIOs, CISOs, IT Directors, General Managers, Executive Committees, and Board Members to deliver actionable recommendations that align security initiatives with business goals. The ideal candidate combines business acumen with deep cybersecurity expertise, regulatory knowledge, and strong communication skills. This position may also function as a Virtual CISO for select engagements.

Key Responsibilities (Expanded)

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps aligned with objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity
Conduct risk assessments and control evaluations
Perform readiness and gap analyses against leading frameworks and regulations
Develop remediation plans and implementation recommendations
Act as a trusted advisor for organizations lacking security leadership
Participate in executive meetings and annual program reviews
Support governance and strategic decision-making
Review target-state security architectures across IAM, SSO, MFA, and related domains
Align programs with modernization and digital transformation
Provide post-incident guidance and root-cause analysis facilitation
Assist with regulatory notification considerations and remediation planning
Build long-term executive relationships and present findings to boards
Coordinate with delivery, engineering, and customer success teams for execution
Contribute to methodology development and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and awareness programs

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, or related field
Master's degree preferred

Certifications

CISSP
CISM
CISA
CRISC
CGEIT
Equivalent cybersecurity certification

Preferred Qualifications

Experience with Japanese multinational corporations in North America
Background in financial services, manufacturing, insurance, telecommunications, or regulated industries
Experience supporting governance, risk management, internal controls, and compliance programs
Familiarity with security operations, incident response, threat intelligence, cloud security, or security architecture
Cloud certifications such as AWS, Azure, or Microsoft Security
demonstrated thought leadership through publications or industry involvement

How to Apply

Email your resume to xjiang@pasona.com

View full job page →

1mo ago

Senior Cybersecurity GRC Analyst

The Norland Group San Jose, CA

San Jose, CA

1mo ago Closed

$85 - $95/hr Full time Senior Cmmc Controls Enterprise Risk

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

The Norland Group seeks a Senior Cybersecurity GRC Analyst to lead governance, risk, and compliance initiatives across the organization. The role encompasses audits, risk assessments, identity and access governance, third-party risk management, and policy and process engineering. This on-site position is based in San Jose, CA.

Responsibilities

Develop and manage the overarching Compliance Program to align with industry standards such as SOC 2, NIST 800-171, ISO 27001, and NIST 800-53.
Collaborate with IT Security Operations to ensure security controls are properly designed, implemented, and operating effectively.
Lead the end to end cybersecurity audit process, including preparation of response documentation and execution of remediation plans.
Produce and distribute high level information security reports and compliance dashboards for key stakeholders.
Direct comprehensive cybersecurity risk assessments across the enterprise, identifying vulnerabilities and recommending prioritized mitigations.
Develop and maintain the Corporate Risk Register, tracking risk acceptance, treatment plans, and residual risk.
Perform quantitative and qualitative risk analysis to inform executive decision making and resource allocation.
Oversee and collaborate with stakeholders to execute quarterly user access reviews and monthly user activity monitoring.
Ensure timely completion, technical accuracy, and rigorous documentation of all access reviews to meet audit requirements.
Analyze access trends and over privileged accounts to recommend Least Privilege improvements and RBAC refinements.
Own and maintain Third-Party Risk Management evaluation practices, ensuring vendors are vetted against corporate security standards to mitigate supply chain risk.
Author, maintain, and update information security policies and Standard Operating Procedures to align with evolving industry standards.
Manage and govern Change Management processes to maintain security stability and compliance during technical transitions.

Requirements

Experience: Minimum 10 years of experience managing cybersecurity compliance programs from inception to completion.
Technical Expertise: Hands on experience with SOC 2 and a deep understanding of IT security controls.
Framework Proficiency: Expert knowledge of ISO 27001, CIS v8.1, NIST 800-53, NIST 800-171, CMMC, and FedRAMP.
Analytical Skills: Strong analytical thinking with the ability to prioritize complex tasks in a fast paced, evolving environment.
Communication: Excellent interpersonal, verbal, and written communication skills, able to work effectively as part of a team or independently.
Security Knowledge: Solid foundation in IT security concepts with emphasis on Security Risk Assessment.
Certifications: CISSP, CISM, or CISA preferred.
Preferred Qualifications: Exceptional ability to tailor complex technical communication for both technical audiences and non technical executive leadership.

Technologies

SOC 2
NIST 800-171
ISO 27001
NIST 800-53
CIS v8.1
CMMC
FedRAMP

Location

Onsite at our San Jose office headquaters, five days a week.

View full job page →

1mo ago

Trade Compliance, Contracts, and Cybersecurity Manager

Kensington Electronics, Inc. Austin, TX

Austin, TX

1mo ago Closed

$80k - $115k/yr Full time Manager Cmmc Controls Compliance

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

This role oversees trade compliance, contracts, and cybersecurity controls for Kensington Electronics' electronics distribution business.

Responsibilities

Assess incoming customer purchase orders, terms and conditions, and flow-down requirements prior to order acceptance.
Spot and escalate clauses tied to CMMC, CUI, cybersecurity, indemnification, insurance, penalties, data rights, and other obligations the organization cannot or will not accept.
Support programs for CMMC, NIST SP 800-171, and Controlled Unclassified Information handling.
Assist with ITAR related compliance and export control data handling where applicable.
Perform restricted party and denied party screening on customers, buyers, vendors, and other counterparties.
Complete customer surveys, vendor onboarding surveys, compliance questionnaires, and related onboarding documentation.
Collaborate with sales, purchasing, operations, finance, quality, and leadership to manage compliance risk and contractual exposure.
Maintain organized compliance records and support practical internal cybersecurity controls.

Requirements

5+ years of experience in trade compliance, contract review, customer compliance, cybersecurity compliance, export controls, or related risk management.
Direct experience with CMMC and CUI compliance requirements.
Direct experience with ITAR regulations.
Experience reviewing customer terms, flow-down clauses, or contract requirements.
Experience performing denied party or restricted party screening.
Strong documentation, organizational, and follow-through skills.
Sound judgment with the ability to escalate risk appropriately.

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Health savings account
Life insurance
Paid time off
Vision insurance

Preferred Qualifications

Experience in electronics distribution, aerospace or defense supply chains, or other regulated distribution environments
Experience in a small to mid-sized business with broad, hands-on responsibilities
Working knowledge of NIST SP 800-171
Experience with customer surveys, vendor onboarding forms, and compliance questionnaires

Ideal Candidate

Fits best in a distributor setting with practical business compliance awareness
Detail-oriented, confident interpreting contractual requirements, and comfortable escalating risk
Experienced with CMMC, CUI, ITAR, and restricted party screening

Application Questions

Do you have direct hands-on experience with CMMC compliance requirements?
Do you have direct hands-on experience with Controlled Unclassified Information handling requirements?
Do you have direct hands-on experience with ITAR regulations?
Have you reviewed customer terms and conditions, flow-down clauses, or contract requirements for compliance or business risk?
Have you performed denied party or restricted party screening using U.S. government databases?
Do you have experience in a regulated distributor, aerospace/defense, or customer-driven compliance environment?

Work Location

In person
Onsite in Austin, TX

Pay

USD 80,000 - 115,000 per year

View full job page →

Regulatory Compliance Cybersecurity Jobs

Cybersecurity Analyst

Industrial Security Analyst

Cybersecurity Specialist #580

Cybersecurity Consultant-Japanese Bilingual

Senior Cybersecurity GRC Analyst

Trade Compliance, Contracts, and Cybersecurity Manager

Get Regulatory Compliance Cybersecurity Jobs alerts