NISSC 3 Information Systems Security Analyst (Security & Regulation Compliance)

AMERICAN SYSTEMSis seeking an Information Systems Security Analyst (Security & Regulatory Compliance) with 7 - 10 years experience and a TS/SCI Clearanceto support The North American Aerospace Defense Command (NORAD), Cheyenne Mountain Complex (NCMC) -Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) and Space Support Contract III Mission.

• Implement andmaintaininformation security practices, including execution of risk assessments, vulnerability and incident response, compliance tracking, system documentation, and regular production/submission of security event reports, plans, and artifacts.
• Support secure handling and storage of classified/unclassified materials and user access provisioning, monitor POA&M tracking, and coordinate compliance audits and readiness activities.
• Lead or support training and process improvement efforts, ensuring protection of sensitive data, improvement of security practices, and overall compliance with DoD policy and contract requirements.
• Developing andmaintainingcompliance programs.
• Conducting audits and assessments. Monitoring compliance with industry standards such as GDPR, HIPAA, PCI-DSS, etc.
• Preparing documentation for regulatory bodies.
• Training staff on compliance requirements.

#NISSC

#LI-EW1

Education: Bachelors in IT, Cyber, CS, IS, Data Science, or SW Engineering OR equivalent DoD/Military training

Clearance: Top Secret / SCI
Certifications: CCSP, Cloud+, CSC, GCLD, GSEC, and/orSecurityX/CASP+ certification.
Experience: 7-10 Years

• Expertisein cybersecurity and information assurance principles, withdemonstratedability to implement,monitor, and assess security compliance through vulnerability scans, risk assessments, and incident response.
• Proficient in coordinating risk management certifications, incident response strategies, security documentation, artifact tracking, and compliance reporting.
• Skilled in user access provisioning, secure material handling and storage, audit facilitation, and regular production/submission of security plans and reports.
• Experienceleveragingcybersecurity and security management tools such aseMASS, XACTA, CORE, ACAS, SCAP tools, Nessus,Checkmarx, and ZAP DAST.

Notice of Anticipated Employment Opportunities

These positions are being posted in anticipation of future employment opportunities, which may become available beginning around June 2026. There is no guarantee of employment or a specific start date; actual hiring and start dates will depend on organizational needs and other factors. Candidates may be considered for these or similar positions as opportunities arise.