Offer summary

Qualifications:

Bachelor's degree in Cybersecurity, Information Technology, or a related field., 3–5 years of hands-on experience with DoD compliance programs and NIST 800-171 frameworks., Proficiency in writing and maintaining RMF documentation such as SSP, SAR, and POA&M., Preferred certifications include Security+, CISM, CAP, or equivalent..

Key responsibilities:

Conduct gap analyses and track remediation, maintaining and updating Plan of Action & Milestones (POA&Ms).

Prepare for and support compliance audits, risk assessments, and security reviews across multiple systems.

Monitor and report on the effectiveness of security controls and suggest risk mitigation strategies.

Collaborate with Information Systems Security Officers (ISSOs), security engineers, and auditors to ensure successful audit outcomes.

Job description

Position Summary
Blue Sky is seeking a skilled Cybersecurity Compliance Analyst to join a mission-focused cybersecurity team in strengthening compliance posture and audit readiness across Department of Defense (DoD) IT systems. As a Cybersecurity Compliance Analyst, you will play a critical role in documenting, assessing, and enhancing cybersecurity controls, ensuring continuous compliance with NIST 800-171, DFARS, and other federal frameworks.

Key Responsibilities

Conduct gap analyses and remediation tracking, maintaining and updating Plan of Action & Milestones (POA&Ms).
Prepare for and support compliance audits, risk assessments, and security reviews across multiple systems.
Track control implementation statuses and develop supporting documentation for security packages (e.g., SSPs).
Monitor and report on the effectiveness of security controls and suggest risk mitigation strategies.
Work collaboratively with Information Systems Security Officers (ISSOs), security engineers, and auditors to ensure successful audit outcomes.
Review documentation for alignment with Risk Management Framework (RMF) and DHA mandates.

Qualifications

Bachelor's degree in Cybersecurity, Information Technology, or related field.
3–5 years of hands-on experience supporting DoD compliance programs and NIST 800-171 frameworks.
Proficiency in writing and maintaining RMF documentation (SSP, SAR, POA&M, etc.).
Preferred certifications: Security+, CISM, CAP, or equivalent.

About Blue Sky
Blue Sky Innovative Solutions (Blue Sky) assists its federal, state and local, and commercial clients with solving their toughest challenges in the areas of IT Infrastructure Support and Engineering; Application Development and Maintenance; Program and Project Management; and Management Consulting. Find out more about Blue Sky at www.bsis-llc.com. Blue Sky is an equal opportunity employer and recruits mission-oriented, proactive, skilled candidates from across the United States. As an SBA certified HUBZone small business, Blue Sky has a special interest in recruiting and hiring personnel who reside in HUBZones. To determine whether you reside in a HUBZone, visit http://map.sba.gov/hubzone/maps/ . All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Required profile