Cybersecurity/GRC Compliance Analyst

Cybersecurity Compliance Analyst – Orlando, FL

Salary: $80,000–$100,000 base + 25% bonus

Location: Onsite in Orlando, FL 32810

This role does not offer relocation assistance. Candidates must already reside within commuting distance of the Orlando area.

Summary

Our client is a rapidly growing cybersecurity company seeking a Cybersecurity Compliance Analyst to support governance, risk, compliance, and audit readiness initiatives across the organization.

What You’ll Do

• Work heavily within frameworks like NIST CSF, NIST 800-53, NIST 800-171, RMF, FedRAMP, ISO 27001, SOC 2, and STIG
• Support audits by gathering evidence, validating controls, tracking remediation items, and working directly with auditors
• Complete customer security questionnaires and support security reviews tied to sales opportunities
• Review access controls, PAM processes, vulnerability scans, and continuous monitoring activities
• Help assess vendor risk and third-party security posture
• Work with infrastructure, development, MDR/SOC, IT, leadership, and business teams to validate controls and resolve compliance gaps
• Help manage policies, documentation, ownership, retention standards, and version control
• Track compliance and audit-related tasks through resolution across multiple teams
• Support FedRAMP and other compliance readiness initiatives in a fast-moving environment
• Help balance security requirements with business needs instead of acting as a blocker

What You Bring

• 6+ years of experience in cybersecurity, GRC, IT compliance, cyber risk, audit, or related environments
• Strong understanding of governance, risk, and compliance concepts, including control frameworks, audit lifecycle activities, risk management, and access governance
• Ability to explain and differentiate frameworks such as NIST CSF, NIST 800-53, NIST 800-171, RMF, ISO 27001, SOC 2, FedRAMP, and STIG
• Experience supporting or participating in audits, evidence review, remediation tracking, policy governance, or compliance programs
• Familiarity with PAM, identity/access governance, vulnerability management, access reviews, and continuous monitoring processes
• Strong communication skills with the ability to work across technical and non-technical teams
• Ability to stay composed and think critically in high-pressure audit and compliance environments
• Collaborative, solutions-oriented mindset with the ability to balance security requirements and business objectives
• Comfortable operating in fast-paced, high-growth environments with shifting priorities

Preferred Backgrounds

• Cybersecurity consulting
• GRC or IT compliance
• Security compliance analyst
• Internal IT audit
• MSSP/MDR environments
• SaaS, healthcare tech, fintech, cloud, or regulated industries
• FedRAMP, healthcare, financial services, or regulated enterprise environments

Who This Is For

• Someone with a cybersecurity compliance or GRC background who wants to stay close to real-world security operations and enterprise risk
• Someone technical enough to understand security controls, but who also enjoys governance, audits, frameworks, and cross-functional collaboration
• Someone who can communicate clearly, operate calmly under pressure, and work effectively in a fast-moving audit environment
• Someone who is coachable, grounded, solutions-oriented, and comfortable taking ownership in a high-accountability environment

,