Job description

We are seeking a highly skilled Senior Cybersecurity Analyst / Information Security Manager with expertise in IT security, risk management, and policy development . The ideal candidate will have a minimum of five (5) years of experience implementing security measures to protect the confidentiality, integrity, and availability of information systems and data, along with at least two (2) years of supervisory experience in a cybersecurity or IT security role. This individual will be responsible for developing, monitoring , and testing cybersecurity plans and controls using government-approved tools and methodologies while ensuring compliance with federal cybersecurity policies and frameworks . Contingent upon contract award Responsibilities • Plan, coordinate, and implement security measures to safeguard information systems and data. • Supervise cybersecurity personnel and oversee daily security operations. • Develop, monitor , and conduct testing of cybersecurity plans and controls using government-approved tools and methodologies . • Document test results, risk assessments, and residual risk reports , and provide recommendations for corrective actions. • Ensure compliance with cybersecurity policies and best practices , including National Institute of Standards and Technology (NIST) Special Publications . • Demonstrate expertise in Security Assessment and Authorization (SA&A) , including NIST 800-37, NIST 800-53, CNSSI standards , and other federal cybersecurity requirements . • Develop and maintain EHSS Security Policies , including the EHSS Privacy Plan, EHSS Configuration Management Plan, and other security-related documentation . • Create and maintain baseline documentation and oversee policy development and reviews for EHSS security programs . • Implement and support Incident Response, Vulnerability Management, and Plan of Action and Milestone (POA&M) management . • Apply expertise in Zero Trust Architecture, cloud security requirements, security assessments, and Continuous Diagnostics and Mitigation (CDM)/Continuous Monitoring . Qualifications • Bachelor’s degree in Information Technology , Cybersecurity, Information Assurance , or a related field from an accredited university or college. • Minimum of five (5) years of experience in IT security, risk management, and policy development. • Minimum of two (2) years of supervisory experience in a cybersecurity or IT security role. • Proficiency in NIST frameworks, risk assessments, security controls, and federal cybersecurity policies . • Must be knowledgeable in Incident Response practices, vulnerability management, Plan of Action and Milestone management, Zero Trust Architecture, cloud requirements and assessments Continuous Diagnostics Mitigations/Continuous Monitoring, Etc. • Strong understanding of Security Assessment and Authorization (SA&A) processes and federal security compliance requirements. • Top Secret clearance Required Certifications: • GIAC Information Security Professional (GISP), ISC2 Certified Information Systems Security Professional , CISSP or equivalent. Job ID 2025-15866 Work Type On-Site Pay Range $150,000 -$190,000 Benefits Regular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees. Company Description Work Where it Matters Compass Point, an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. At Compass Point, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. For our shareholders , Compass Point provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. For our government customers , Compass Point delivers a broad range of skilled IT services, including data-centric services, software development, IT infrastructure modernization, managed IT services, and more. As a Compass Point employee , you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

Requirements

Must-haves

Contingent upon contract award
Plan, coordinate, and implement security measures to safeguard information systems and data.
Supervise cybersecurity personnel and oversee daily security operations.
Develop, monitor , and conduct testing of cybersecurity plans and controls using government-approved tools and methodologies .
Document test results, risk assessments, and residual risk reports , and provide recommendations for corrective actions.
Ensure compliance with cybersecurity policies and best practices , including National Institute of Standards and Technology (NIST) Special Publications .
Demonstrate expertise in Security Assessment and Authorization (SA&A) , including NIST 800-37, NIST 800-53, CNSSI standards , and other federal cybersecurity requirements .
Develop and maintain EHSS Security Policies , including the EHSS Privacy Plan, EHSS Configuration Management Plan, and other security-related documentation .
Create and maintain baseline documentation and oversee policy development and reviews for EHSS security programs .
Implement and support Incident Response, Vulnerability Management, and Plan of Action and Milestone (POA&M) management .
Apply expertise in Zero Trust Architecture, cloud security requirements, security assessments, and Continuous Diagnostics and Mitigation (CDM)/Continuous Monitoring .
Bachelor’s degree in Information Technology , Cybersecurity, Information Assurance , or a related field from an accredited university or college.
Minimum of five (5) years of experience in IT security, risk management, and policy development.
Minimum of two (2) years of supervisory experience in a cybersecurity or IT security role.
Proficiency in NIST frameworks, risk assessments, security controls, and federal cybersecurity policies .
Strong understanding of Security Assessment and Authorization (SA&A) processes and federal security compliance requirements.
Top Secret clearance
GIAC Information Security Professional (GISP), ISC2 Certified Information Systems Security Professional , CISSP or equivalent.
$150,000 -$190,000

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: jibe
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off