M365 Security Architect

As a Compliance Analyst, you will build and maintain System Security Plans (SSPs) using Governance, Risk, and Compliance (GRC) tools. You’ll work closely with IT project teams and security leaders to identify vulnerabilities, validate NIST controls, and lead applications through the Authority to Operate (ATO) process. Key Responsibilities & Crux of the Role:

• System Security Plans (SSP): Draft, update, and maintain SSPs for critical IT applications.
• Risk & Compliance: Conduct risk assessments, track remediation plans, and align systems with NIST security controls.
• Security Testing & Scans: Lead vulnerability scanning, data classification, and mitigation tracking.
• Collaboration: Coordinate security requirements with cross-functional technical teams and vendors.

• Experience: 1 3 years in IT Security, Compliance, or a related cybersecurity role.
• Core Standards: Strong working knowledge of NIST , SSP , and GRC concepts.
• Education / Certification (Must meet ONE): Bachelor’s/Associate’s degree in IT/Computer Science, OR Active Cybersecurity Certification (e.g., Security+, CISSP, CISA, etc.), OR Equivalent technical work experience.
• Communication: Clear verbal and written skills to translate complex security concepts to stakeholders.

Bonus Skills:

• Hands-on experience with Keylight (GRC tool).