Cybersecurity Assurance Analyst

Summary

Axonius Federal Systems empowers U.S. government agencies with visibility and control over their cyber assets and supports compliance with cybersecurity regulations. The Cybersecurity Assurance Analyst will support cybersecurity assurance, governance, risk, and compliance programs by maintaining regulatory compliance, managing risk activities, supporting audits, and contributing to security operations and process improvements.

Responsibilities

• Assist with compliance activities related to FedRAMP, ISO 27001, SOC 2, HIPAA, CMMC, and other applicable frameworks
• Gather, organize, and maintain compliance evidence to support audits, assessments, and customer requests
• Support assessments of security control effectiveness using manual and automated validation methods
• Track audit findings and remediation efforts through closure while working with internal stakeholders
• Support maintenance of the organization's cybersecurity risk register
• Assist with tracking risk mitigation activities and documenting risk treatment plans
• Participate in risk assessments, vendor reviews, and ongoing risk monitoring activities
• Partner with cross-functional teams to collect information and support risk management initiatives
• Assist in maintaining and updating security policies, standards, and procedures
• Support periodic access reviews, business continuity testing, disaster recovery exercises, and other governance activities
• Monitor changes to regulatory and compliance requirements and help assess their impact on existing programs
• Contribute to efforts that improve processes, automation, and operational efficiency across the cybersecurity assurance function
• Support customer and internal requests related to cybersecurity assurance and compliance programs
• Assist in preparing responses to security questionnaires, audit requests, and compliance inquiries
• Collaborate with auditors, vendors, and internal stakeholders to support ongoing compliance activities
• Participate actively in team meetings, training initiatives, and knowledge-sharing activities

Skills

• 2+ years of experience in cybersecurity, compliance, information assurance, IT audit, risk management, vendor risk, or a related field
• Familiarity with one or more security and compliance frameworks such as NIST SP 800-53, FedRAMP, DoD RMF, CMMC, ISO 27001, SOC 2, or HIPAA
• Ability to leverage AI-enabled and automated solutions to improve compliance and risk management processes
• Strong written communication skills with the ability to assist in developing policies, procedures, compliance documentation, and audit responses under guidance from senior team members
• Exposure to FedRAMP authorization or continuous monitoring activities
• Experience working with GRC platforms, compliance tracking systems, vulnerability management tools, or audit management solutions
• Familiarity with Jira or similar workflow management tools
• Knowledge of SaaS, cloud, or AWS security concepts
• Relevant certification such as Security+, CISA, CRISC, CISM, CISSP, or CCSP
• Experience translating technical information into clear, business-friendly recommendations

Qualifications

Must Haves

• 2+ years of experience in cybersecurity, compliance, information assurance, IT audit, risk management, vendor risk, or a related field
• Familiarity with one or more security and compliance frameworks such as NIST SP 800-53, FedRAMP, DoD RMF, CMMC, ISO 27001, SOC 2, or HIPAA
• Ability to leverage AI-enabled and automated solutions to improve compliance and risk management processes
• Strong written communication skills with the ability to assist in developing policies, procedures, compliance documentation, and audit responses under guidance from senior team members

Nice to Haves

• Exposure to FedRAMP authorization or continuous monitoring activities
• Experience working with GRC platforms, compliance tracking systems, vulnerability management tools, or audit management solutions
• Familiarity with Jira or similar workflow management tools
• Knowledge of SaaS, cloud, or AWS security concepts
• Relevant certification such as Security+, CISA, CRISC, CISM, CISSP, or CCSP
• Experience translating technical information into clear, business-friendly recommendations

Benefits

• Stock options
• An annual bonus
• Meaningful growth opportunities
• Remote work in the United States