ShorePoint Inc
ShorePoint Inc
ShorePoint Inc is a privately held cybersecurity services company founded by cybersecurity veterans. The firm develops and supports cyber defense strategies across the full cybersecurity lifecycle, with expertise in Continuous Diagnostics and Mitigation, threat protection, security compliance, and information protection. ShorePoint works with public- and private-sector organizations to help safeguard critical assets and strengthen their security posture, bringing together practical expertise and a collaborative approach to complex cyber defense challenges.

Security Compliance Analyst – Virginia Remote

Support ShorePoint’s cybersecurity services for federal customers as a Security Compliance Analyst. Manage FISMA, RMF, ATO, ICAM compliance documentation, audits, and continuous monitoring.

Description

  • Assist the SIAM with the program’s information assurance and cybersecurity compliance strategy
  • Coordinate security documentation, control implementation, and ATO and cATO activities with ISOs and ISSOs
  • Support FISMA compliance work, annual self-assessments, security control assessments, and IG/OMB-driven audits
  • Create, review, and maintain SSPs, SARs, POA&Ms, and RARs
  • Assist with RMF tasks, including control selection, implementation tracking, assessment, and continuous monitoring
  • Monitor POA&M remediation and ensure findings are documented, assigned, and resolved on schedule
  • Assemble materials and evidence packages for internal reviews, external audits, and compliance inspections
  • Help maintain ICAM system compliance and track changes to policies, procedures, and controls
  • Keep continuous monitoring records current and contribute to monthly and quarterly compliance reports
  • Take part in control assessments, walkthroughs, and stakeholder interviews
  • Maintain document repositories and audit trails to support inspection readiness
  • Report compliance status, risks, and action items to the SIAM and program leadership

Requirements

  • Bachelor’s degree in cybersecurity, information technology, information systems, or a related discipline, or equivalent professional experience
  • At least two years of experience in federal information security compliance, IT security, or a related area
  • Experience using GRC platforms such as Xacta, CSAM, RSA Archer, or comparable tools
  • Practical experience supporting FISMA compliance activities and/or federal security audits
  • Experience working with ISOs and/or ISSOs on system security documentation and A&A activities
  • Strong written and verbal communication abilities
  • Highly organized, detail-oriented approach to documentation control and audit readiness
  • Ability to interpret complex requirements and convert them into clear, actionable processes and tasks
  • U.S. citizenship
  • Eligibility to obtain and maintain a Public Trust security clearance
  • Experience supporting an ICAM program or similar identity governance initiative is beneficial
  • Familiarity with FICAM architecture, NIST SP 800-63 digital identity guidance, or OMB M-19-17 or successor ICAM policy is beneficial
  • Relevant certifications such as CompTIA Security+, CAP, CISSP, or CISA are beneficial
  • Experience with continuous monitoring programs or cATO initiatives is beneficial
  • Prior federal contracting experience with a civilian or defense agency is beneficial

Benefits

  • 144 hours of paid time off
  • 11 paid holidays
  • Coverage of 85% of insurance premiums
  • Healthcare plans through major carriers
  • 401(k) retirement plan
  • Continuing education support
  • Certification maintenance and reimbursement
  • Career development opportunities
  • Technical and professional growth opportunities

Related Jobs