Cybersecurity Assurance Analyst

Position Summary:

Axonius Federal Systems (AFS) is seeking a Cybersecurity Assurance Analyst to support our cybersecurity assurance, governance, risk, and compliance (GRC) programs. Reporting to the Principal Cybersecurity Assurance Manager, you’ll help maintain compliance with regulatory and industry frameworks, support risk management activities, and contribute to audit readiness efforts across our platforms and services.

If you’re a cybersecurity professional who is looking to grow their experience in security compliance, risk management, and cloud security within a fast-paced and collaborative environment, we encourage you to apply!

Key Responsibilities:

Compliance and Audit Support:

• Assist with compliance activities related to FedRAMP, ISO 27001, SOC 2, HIPAA, CMMC, and other applicable frameworks.
• Gather, organize, and maintain compliance evidence to support audits, assessments, and customer requests.
• Support assessments of security control effectiveness using manual and automated validation methods.
• Track audit findings and remediation efforts through closure while working with internal stakeholders.

Risk Management:

• Support maintenance of the organization's cybersecurity risk register.
• Assist with tracking risk mitigation activities and documenting risk treatment plans.
• Participate in risk assessments, vendor reviews, and ongoing risk monitoring activities.
• Partner with cross-functional teams to collect information and support risk management initiatives.

Governance and Security Operations Support:

• Assist in maintaining and updating security policies, standards, and procedures.
• Support periodic access reviews, business continuity testing, disaster recovery exercises, and other governance activities.
• Monitor changes to regulatory and compliance requirements and help assess their impact on existing programs.
• Contribute to efforts that improve processes, automation, and operational efficiency across the cybersecurity assurance function.

Communication and Collaboration:

• Support customer and internal requests related to cybersecurity assurance and compliance programs.
• Assist in preparing responses to security questionnaires, audit requests, and compliance inquiries.
• Collaborate with auditors, vendors, and internal stakeholders to support ongoing compliance activities.
• Participate actively in team meetings, training initiatives, and knowledge-sharing activities.

Minimum Qualifications:

• 2+ years of experience in cybersecurity, compliance, information assurance, IT audit, risk management, vendor risk, or a related field.
• Familiarity with one or more security and compliance frameworks such as NIST SP 800-53, FedRAMP, DoD RMF, CMMC, ISO 27001, SOC 2, or HIPAA.
• Ability to leverage AI-enabled and automated solutions to improve compliance and risk management processes.
• Strong written communication skills with the ability to assist in developing policies, procedures, compliance documentation, and audit responses under guidance from senior team members.

Preferred Qualifications:

• Exposure to FedRAMP authorization or continuous monitoring activities.
• Experience working with GRC platforms, compliance tracking systems, vulnerability management tools, or audit management solutions.
• Familiarity with Jira or similar workflow management tools.
• Knowledge of SaaS, cloud, or AWS security concepts.
• Relevant certification such as Security+, CISA, CRISC, CISM, CISSP, or CCSP.
• Experience translating technical information into clear, business-friendly recommendations.