Cybersecurity Analyst (Risk & Compliance)

Role: Cybersecurity Analyst (Risk & Compliance)
Location: Rockville , MD
Job Type: Hybrid 

Skill set:
Hands on experience with security frameworks and regulatory requirements such as NIST SPxxxxxxxxxxxxxxx, CIS Controls, FERPA, GLBA, PCI-DSS, and privacy standards.
Strong experience supporting compliance with GRC initiatives that aligned with Payment Card Industry Data Security Standard (PCI DSS), Gramm-Leach-Bliley Act (GLBA), and Family Educational Rights and Privacy Act (FERPA).
Expertise in performing control testing and validating evidence, including direct experience evaluating SOC 2 Type II reports and HECVAT documentation.

One or more of the following relevant certifications is a must:
(CRISC), (CGRC), (CISSP), CompTIA Security+, (CySA+), (CEH), GIAC Vulnerability Assessment, Tenable/ Nessus certification