> Markdown version of [/jobs/ext/1926203-it-security-compliance-analyst](https://www.wearedevelopers.com/jobs/ext/1926203-it-security-compliance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Compliance Analyst

- **Company:** HTC Global Services, Inc.
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Enterprise Information Management, Data Classification, Information Technology, Plan of Action and Milestones
- **Published:** August 5, 2026
- **Apply:** https://www.dice.com/job-detail/2af244af-8550-46e9-b6cb-7c777edc95e2

## About the Role

* 1 3 years of experience in the field or a related area.
 * Knowledge of commonly used concepts, practices, and procedures within the field., + Bachelor's degree or higher with the required computer science or related coursework and the required experience.
 + Associate's degree with the required computer science or related coursework and at least two years of experience as an application programmer, computer operator, or information technology technician.
 + High school diploma (or equivalent) and three years of experience as an application programmer, computer operator, or information technology technician. Official transcripts must be attached if applicable.
 + IT Certification.

## Description

The IT Security Compliance Analyst is responsible for creating, maintaining, and managing System Security Plans (SSPs) for new and existing systems using the Governance, Risk, and Compliance (GRC) tool. This role works closely with IT project teams, technical leads, business stakeholders, enterprise security representatives, and product owners to establish security processes, maintain security controls, identify vulnerabilities, and coordinate remediation activities. The analyst also supports SSP and Authority to Operate (ATO) activities for Commercial Off-the-Shelf (COTS) implementation projects., * Create System Security Plans (SSPs) for new applications in collaboration with Automation Managers, System Owners, System Security Administrators, and project teams.

 * Maintain SSPs for existing applications requiring Authority to Operate (ATO) and for systems undergoing software or hardware enhancements.
 * Collaborate with business representatives to establish system registration.
 * Lead and identify security testing and system scanning requirements.
 * Perform risk assessments and provide responses for security controls.
 * Continuously monitor Plans of Action and Milestones (POA&M) and corrective action plans related to SSPs in collaboration with the Enterprise Information Management office.
 * Validate SSPs to ensure compliance with NIST security control requirements.
 * Author recommendations to improve customer security posture in accordance with Policies, Standards, Procedures, and NIST controls.
 * Lead team members and vendors in collecting required security artifacts for assessments.
 * Coordinate scanning and enterprise security activities, technical leads, and business teams.
 * Lead system Data Classification activities as part of the SSP/ATO process.


## Related Videos

- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)