Supports cybersecurity compliance and advisory engagements for federal and commercial clients. Assists with SA&A, ATO documentation, compliance gap assessments, control validation, vulnerability analysis, POA&M tracking, continuous monitoring, audits, and remediation coordination. Develops SSPs, SOPs, policies, technical documentation, diagrams, compliance metrics, dashboards, and client deliverables aligned with FedRAMP, NIST RMF, FISMA, and DoD requirements.
Job Title: Associate, Compliance Advisor
Pay Type: SALARIED EXEMPT
Location: Remote
Summary of Position Role/Responsibilities
The Associate, Compliance Advisor supports Quzara's cybersecurity advisory practice by assisting federal and commercial clients with implementing, maintaining, and assessing security and compliance programs. This role supports security assessment and authorization (SA&A) activities, continuous monitoring, and governance initiatives across frameworks including FedRAMP, NIST RMF, FISMA, and DoD IL4/5. Works closely with engineering teams, compliance advisors, auditors, and client stakeholders, the Associate helps identify compliance gaps, validate security control implementation, coordinate remediation efforts, and develop the documentation required to support authorization and ongoing compliance. This role requires strong analytical abilities, excellent documentation skills, and the ability to communicate effectively with both technical and non-technical stakeholders.
Essential Functions of the Job
- Support Security Assessment & Authorization (SA&A) activities by coordinating and tracking Authorization to Operate (ATO) documentation and authorization packages.
- Conduct compliance gap assessments and identify risks across customer cloud and hybrid environments.
- Coordinate with engineering and technical teams to validate implementation of technical, operational, and management security controls.
- Perform vulnerability and compliance assessments, analyze scan results, and provide recommendations for remediation.
- Audit security controls to validate compliance with FedRAMP, NIST RMF, FISMA, DoD IL4/5, and other applicable governance requirements.
- Manage and track Plans of Action & Milestones (POA&Ms), including remediation activities, status reporting, and risk reduction efforts.
- Support Continuous Monitoring (ConMon) activities by reviewing security documentation, scan results, logs, and system evidence to validate ongoing compliance.
- Develop, maintain, and update security documentation including:
- System Security Plans (SSPs)
- Standard Operating Procedures (SOPs)
- Security policies and procedures
- Technical implementation documentation
- Interview subject matter experts to gather technical and operational information required for compliance documentation.
- Coordinate onsite and remote security assessments with internal stakeholders, customers, and external auditors.
- Develop compliance metrics, dashboards, and status reporting to measure program effectiveness and identify areas for improvement.
- Support proposal development and technical responses to customer requests, ensuring alignment with applicable regulatory requirements.
- Produce and maintain technical diagrams and architecture illustrations using Microsoft Visio or similar diagramming tools.
- Clearly document client deliverables, ensuring legal, administrative, physical, and technical security controls are accurately represented within the organization's risk management framework.
Marginal Functions of the Job
- Other duties as assigned
Normal Work Schedule
This is a full-time position. Standard business hours are Monday through Friday 8:30 AM to 5:30 PM. Additional time outside of these hours may be needed to complete the essential functions of the job.
Education, Training, and Experience
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
- Minimum 1–3 years of experience supporting cybersecurity compliance, governance, risk management, or security assessment activities within federal or regulated environments.
- Working knowledge of:
- FedRAMP
- NIST SP 800-53
- Risk Management Framework (RMF)
- FISMA
- DoD IL4/IL5 (preferred)
- Experience supporting Security Assessment & Authorization (SA&A) or Authorization to Operate (ATO) activities is preferred.
- Experience developing and maintaining security documentation including SSPs, SOPs, policies, procedures, and compliance artifacts.
- Proficiency using vulnerability and compliance scanning tools such as Nessus, Tenable, or similar technologies.
- Strong analytical and problem-solving skills with the ability to identify compliance risks and recommend remediation activities.
- Excellent written and verbal communication skills with the ability to prepare professional documentation, reports, and technical deliverables.
- Experience creating technical diagrams using Microsoft Visio or similar visualization tools is preferred.
- Strong organizational skills with the ability to manage multiple priorities and deadlines within a remote team environment.
- Demonstrated attention to detail and commitment to delivering accurate, audit-ready documentation.
Preferred Certifications
- CompTIA Security+
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Other cybersecurity or compliance-related certifications are considered a plus.
EEO Statement
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Owns post-sales relationships across a portfolio of ServiceNow accounts, driving platform adoption, customer satisfaction, value realization, renewals, and expansion. Builds executive stakeholder alignment, maintains outcome-based success plans, identifies risks, manages escalations, supports implementations, promotes AI capabilities, and coordinates ServiceNow teams and partners. The role requires strong commercial judgment, consulting or professional services experience, technology transformation expertise, and the ability to engage Director- and VP-level stakeholders.
Top Skills:
AgileAIEnterprise SoftwareSaaSScrumServicenowSoftware Development Lifecycle
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handles inbound calls and warm leads, consults customers on insurance needs, recommends appropriate coverages and products, and converts prospects into policyholders. The role includes paid training and Property and Casualty licensing, customer relationship management, sales closing, and flexible remote work. Representatives must work four weekdays and one weekend day while maintaining a dedicated home workspace and reliable wired internet connection.
Top Skills:
CableDslFiberPcWired High-Speed Internet
Artificial Intelligence • Fintech • Hardware • Information Technology • Sales • Software • Transportation
Own the data partnerships product roadmap and serve as the product expert in partner deals. Scope data products, conduct technical diligence, create data samples and specifications, shape pricing, and coordinate Legal, Security, Data Engineering, and partners through launch. Build reusable capabilities for APIs, data feeds, consent, access controls, and integrations while supporting commercial partnerships and compliance requirements.
Top Skills:
APIsConsent ManagementData FeedsDe-IdentificationHashingIntegrationsOauthWarehouse Sharing
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
