WE’RE HIRING! CYBERSECURITY ANALYST (MID-LEVEL)

Location: Santa Monica, CA | On site
Employment Type: Full-time
Experience Level: 3+ Years
Salary Range: 85K-95K
Benefits: Comprehensive Health Coverage

OTHER REQUIREMENTS:

· Must have a valid work authorization for United States of America: visa sponsorship is not available for this role.
· Must be within commuting distance from Santa Monica, CA or planning to relocate.

ABOUT THE ROLE

We are seeking a detail-oriented and highly knowledgeable Cybersecurity Compliance Analyst to join our Information Security team. This role is responsible for implementing, maintaining, and auditing cybersecurity compliance frameworks across our systems and infrastructure. You will ensure our policies and controls align with industry and government cybersecurity standards, particularly within the context of defense and federal contracts.
This position requires deep familiarity with government regulations, risk management frameworks, and technical security standards, including NIST, DFARS, ISO, and CMMS guidelines.

KEY RESPONSIBILITIES

• Lead initiatives to comply with the Cybersecurity Maturity Model Certification (CMMC), including gap assessments and remediation plans.
• Interpret and implement controls from NIST SP 800-171 and NIST SP 800-53, focusing on protecting Controlled Unclassified Information (CUI) in nonfederal systems.
• Manage compliance efforts for DFARS 252.204-7012, including security requirements for safeguarding Covered Defense Information (CDI) and incident reporting.
• Support implementation and continuous improvement of our ISO/IEC 27001 Information Security Management System (ISMS).
• Conduct security configuration assessments in alignment with STIG (Security Technical Implementation Guides).
• Maintain a centralized compliance tracking system (e.g., CMMS) to document security posture, control implementation, and audit readiness.
• Collaborate with IT, Engineering, and Legal teams to ensure continuous alignment with evolving regulations and customer requirements.
• Support audits, internal assessments, and incident response processes, ensuring traceable documentation and risk mitigation plans.