> Markdown version of [/jobs/ext/451352-nissc-3-information-systems-security-analyst-security-regulation-compliance](https://www.wearedevelopers.com/jobs/ext/451352-nissc-3-information-systems-security-analyst-security-regulation-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# NISSC 3 Information Systems Security Analyst (Security & Regulation Compliance)

- **Company:** AMERICAN SYSTEMS
- **Location:** Colorado Springs, CO, United States
- **Experience:** Expert
- **Salary:** $116,200.0 - $194,000.0
- **Contract:** Permanent contract
- **Skills:** Adobe Analytics, Xacta, Software Documentation, Cyber Security, Information Security Management, PCI Data Security Standards, Security Content Automation Protocol, Nessus, Checkmarx, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** June 1, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e87b855b81091a54

## About the Role

Do you have experience in Vulnerability scanning implementation?, Do you have a Bachelor's degree?, Education: Bachelors in IT, Cyber, CS, IS, Data Science, or SW Engineering OR equivalent DoD/Military training
Clearance: Top Secret / SCI
Certifications: CCSP, Cloud+, CSC, GCLD, GSEC, and/or SecurityX/CASP+ certification.
Experience: 7-10 Years

 * Expertise in cybersecurity and information assurance principles, with demonstrated ability to implement, monitor, and assess security compliance through vulnerability scans, risk assessments, and incident response.
 * Proficient in coordinating risk management certifications, incident response strategies, security documentation, artifact tracking, and compliance reporting.
 * Skilled in user access provisioning, secure material handling and storage, audit facilitation, and regular production/submission of security plans and reports.
 * Experience leveraging cybersecurity and security management tools such as eMASS, XACTA, CORE, ACAS, SCAP tools, Nessus, Checkmarx, and ZAP DAST.

## Description

* AMERICAN SYSTEMS is seeking an Information Systems Security Analyst (Security & Regulatory Compliance) with 7 - 10 years experience and a TS/SCI Clearance to support The North American Aerospace Defense Command (NORAD), Cheyenne Mountain Complex (NCMC) -Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) and Space Support Contract III Mission., * Implement and maintain information security practices, including execution of risk assessments, vulnerability and incident response, compliance tracking, system documentation, and regular production/submission of security event reports, plans, and artifacts.
 * Support secure handling and storage of classified/unclassified materials and user access provisioning, monitor POA&M tracking, and coordinate compliance audits and readiness activities.
 * Lead or support training and process improvement efforts, ensuring protection of sensitive data, improvement of security practices, and overall compliance with DoD policy and contract requirements.
 * Developing and maintaining compliance programs.
 * Conducting audits and assessments. Monitoring compliance with industry standards such as GDPR, HIPAA, PCI-DSS, etc.
 * Preparing documentation for regulatory bodies.
 * Training staff on compliance requirements.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)