New

ISSO / Security Compliance Analyst

United States·Washingtonmid

Finance & AccountingCompliance Analyst

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Informational;

Requirements Summary

At least 4 years of cybersecurity, information assurance, compliance, assessment,

Technical Tools

Finance & AccountingCompliance Analyst

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

We offer a Full Benefits package including:

Competitive Employee Health Insurance options including dental
100% company paid vision plan
401K plan with generous company match and no vesting period
100% company paid life insurance
100% company paid long and short-term disability insurance
Training allowance
PTO and more

ISSO / Security Compliance Analyst

Must be a United States citizen.
Must be eligible for a Tier 4 High-Risk Public Trust investigation.
Strong preference for a current or recently favorably adjudicated Tier 4 or Tier 5 investigation.

Role:
Provide system-level ISSO support under the direction of the Lead and Senior ISSOs. Maintain security records, collect and validate evidence, update CSAM records, track POA&Ms, reconcile ServiceNow actions, support access and account reviews, prepare recurring reports, and coordinate with system owners and technical teams.

This position carries an assigned system portfolio and is not limited to clerical documentation. The analyst must understand the relationship among system architecture, controls, vulnerabilities, changes, incidents, evidence, and authorization status.

Minimum Requirements:

At least 4 years of cybersecurity, information assurance, compliance, assessment, or ISSO experience
At least 2 years supporting federal systems
Working knowledge of:
- NIST SP 800-37
- NIST SP 800-53
- SSPs
- POA&Ms
- Security-control evidence
- Continuous monitoring
- Change-impact analysis
Experience using at least one GRC platform:
- CSAM
- eMASS
- Xacta
- Archer
- ServiceNow GRC
Experience using ServiceNow or another ITSM platform
Ability to review evidence for currency, completeness, ownership, and traceability
Security+ required or obtainable before start
Bachelor’s degree preferred but not required

Competitive Differentiators:

CSAM experience
FISMA Moderate systems
Tenable, Qualys, or Splunk experience
Azure Government or Microsoft 365 GCC/GCC High
FedRAMP documentation
Audit evidence collection and response
Current federal suitability
CGRC certification

The resume must clearly identify:

Systems supported
GRC and ITSM tools used
Artifacts maintained
POA&M responsibilities
Evidence collection and validation work
Audit or assessment support
Security impact analysis or change-control involvement
Measurable backlog, timeliness, quality, or closure results

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
Message frequency will vary depending on the application process.Msg & data rates may apply.
OPT out at any time by texting "Stop".