ZipRecruiter

Log In

1

Cyber Security Compliance Analyst Jobs (NOW HIRING)

Micron Technology

Cyber Security Compliance Liaison

Boise, ID · On-site

$105K - $142K/yr

... compliance consistency across the cybersecurity program. You will work closely with leaders and ... advanced analytics; preferred experience with ServiceNow, Workiva, AuditBoard (Optro), OneTrust ...

Micron

Cyber Security Compliance Liaison

Boise, ID · On-site

$105K - $142K/yr

... compliance consistency across the cybersecurity program. You will work closely with leaders and ... advanced analytics; preferred experience with ServiceNow, Workiva, AuditBoard (Optro), OneTrust ...

Comcast

Senior Compliance Analyst

Philadelphia, PA · On-site +1

Experience in cybersecurity, compliance, or GRC environments * Proficiency in Excel and SQL for analyzing large datasets * Familiarity with (or ability to learn) Snowflake and Databricks environments

previous page

Showing results 41-60

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsCyber Security Compliance Analyst Jobs

Cyber Security Compliance Analyst information

See salary details

$43K

$99.4K

$150K

How much do cyber security compliance analyst jobs pay per year?

As of Sep 3, 2026, the average yearly pay for cyber security compliance analyst in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

What does a cyber security compliance analyst do?

A Cyber Security Compliance Analyst ensures that an organization's information systems follow applicable laws, regulations, and internal security policies. They assess security risks, conduct audits, and help implement controls to safeguard sensitive data. These analysts also prepare compliance reports and work with teams to address any gaps or vulnerabilities. Their work is vital for organizations to avoid legal penalties and maintain trust with customers and partners.

What are some of the key challenges a cyber security compliance analyst faces when ensuring ongoing adherence to regulatory standards?

Cyber Security Compliance Analysts often face challenges such as keeping up with frequently changing regulations, managing documentation for multiple frameworks (like GDPR, HIPAA, or PCI DSS), and ensuring that technical teams remain aligned with compliance requirements. Balancing the need for robust security controls with business efficiency can also be demanding, as can communicating complex compliance requirements to non-technical stakeholders. Success in this role often depends on strong organizational skills, continuous learning, and effective collaboration across IT, legal, and business units.

What are the key skills and qualifications needed to thrive as a cyber security compliance analyst, and why are they important?

To thrive as a Cyber Security Compliance Analyst, you need a solid understanding of information security principles, risk management frameworks, and regulatory requirements such as GDPR, HIPAA, or PCI-DSS, often supported by a degree in cybersecurity or related fields. Familiarity with compliance management tools, security assessment platforms, and certifications like CISSP, CISA, or CompTIA Security+ is typically required. Attention to detail, strong analytical thinking, and effective communication are vital soft skills for interpreting regulations and collaborating with stakeholders. These competencies ensure organizations maintain regulatory compliance and protect sensitive data from evolving cyber threats.

What is the difference between Cyber Security Compliance Analyst vs Cyber Security Auditor?

AspectCyber Security Compliance AnalystCyber Security Auditor
CertificationsCompTIA Security+, CISSP, CISACISA, CISSP, CRISC
Work EnvironmentCorporate, IT departments, compliance teamsAudit firms, consulting agencies, internal audit teams
Primary FocusEnsuring compliance with security standards and policiesAssessing security controls and identifying vulnerabilities
Industry UsageFinance, healthcare, government, any regulated industrySimilar industries, often within audit or consulting firms

While both roles focus on security standards, the Cyber Security Compliance Analyst primarily ensures organizations meet regulatory requirements and internal policies. In contrast, the Cyber Security Auditor evaluates the effectiveness of security controls through audits. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and approach.

More about Cyber Security Compliance Analyst jobs

What cities are hiring for Cyber Security Compliance Analyst jobs?

Cities with the most Cyber Security Compliance Analyst job openings:

What states have the most Cyber Security Compliance Analyst jobs?

States with the most job openings for Cyber Security Compliance Analyst jobs include:

What job categories do people searching Cyber Security Compliance Analyst jobs look for?

The top searched job categories for Cyber Security Compliance Analyst jobs are:

Cyber Security Compliance Analyst jobs near you
Infographic showing various Cyber Security Compliance Analyst job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 12% Part Time, and 4% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $99,400 per year, or $47.8 per hour.

Cyber Security & Compliance Specialist

Melwood Veterans Services

Upper Marlboro, MD • On-site

Full-time

This job post has expired 2 days ago. Applications are no longer accepted.

Job description

The Cybersecurity and Compliance Specialist is responsible for protecting Melwood's information systems, data, and technology infrastructure through the ongoing implementation, monitoring, and management of enterprise cybersecurity controls and regulatory compliance programs. This role serves as the organization's primary internal subject matter expert on cybersecurity frameworks applicable to federal contractors and regulated nonprofit environments, working in close coordination with IT leadership and external compliance advisors to build and sustain a compliant, resilient, and continuously improving security posture. The Cybersecurity and Compliance Specialist supports the preparation and maintenance of required compliance documentation, manages the organization's security operations practices, and ensures that Melwood's technology environment meets its obligations to employees, program participants, funders, and government partners. This position requires an individual with both the technical hands-on capability to implement and monitor security controls and the analytical discipline to manage compliance programs, track remediation commitments, and communicate risk clearly and accurately to leadership.
Responsibilities:
  • Manage the Cybersecurity Compliance Program: Develop, implement, and maintain the organization's cybersecurity compliance program across all applicable regulatory, contractual, and industry standards frameworks. Current primary obligations include federal contractor cybersecurity requirements, healthcare privacy and security standards, federal grants management requirements, and commercial assurance standards. Maintain required compliance documentation including the System Security Plan (SSP) and Plan of Action and Milestones (POA&M). Track remediation commitments, coordinate with IT staff and technology partners on control implementation, and prepare the organization for third-party assessments and audits across all applicable compliance domains.
  • Conduct Security Assessments and Gap Analysis: Perform ongoing assessments of the organization's security posture against all applicable regulatory, contractual, and standards frameworks. Identify control gaps, document findings, assign remediation ownership, and track closure through to completion. Support external assessors, auditors, and certification bodies with documentation, evidence, and technical response regardless of which framework or standard is driving the review
  • Manage Vulnerability and Patch Programs: Administer the organization's vulnerability management program including scheduled scanning, findings triage, remediation coordination, and reporting. Work with IT infrastructure and application teams to ensure security patches are applied within required timeframes consistent with applicable framework obligations and organizational risk tolerance. Ensure that exceptions are documented, justified, and approved by appropriate authority
  • Support Continuous Security Monitoring and Incident Response: Support continuous security monitoring through the organization's security platforms and endpoint protection tools. Investigate alerts, analyze anomalies, and coordinate incident response activities. Maintain the organizational incident response plan and ensure it reflects current regulatory reporting obligations. Prepare and submit required incident reports in accordance with all applicable federal, state, contractual, and regulatory requirements, which may include healthcare privacy laws, federal contractor obligations, and grants management standards.
  • Manage Data Classification and Regulated Data Protection: Support the identification, classification, and protection of all regulated information categories across organizational systems. Current regulated categories include Controlled Unclassified Information, Protected Health Information, and Personally Identifiable Information subject to federal and state privacy requirements. Implement and maintain appropriate data classification controls, access restrictions, and monitoring in coordination with IT and business stakeholders. Monitor applicable state and federal privacy regulations for changes that affect organizational obligations and bring material changes to the attention of IT leadership
  • Manage Third-Party and Vendor Risk: Evaluate technology vendors and third-party service providers for cybersecurity compliance and risk posture across all applicable frameworks. Review vendor agreements for appropriate security, data handling, and regulatory flow-down obligations including Business Associate Agreements for vendors handling Protected Health Information. Assess software configurations and embedded technology features for compliance with organizational data classification policies and all applicable regulatory requirements, not limited to federal contractor standards.
  • Deliver Security Training and Awareness: Develop and deliver cybersecurity awareness training for all staff covering responsible technology use, data protection obligations across all applicable regulatory categories, threat recognition, and incident reporting procedures. Ensure training content reflects the full scope of the organization's regulatory environment and is accessible to staff across all roles and technical literacy levels. Maintain documented training completion records and coordinate role-specific training for IT staff and employees with access to regulated data.
  • Maintain Security Documentation and Reporting: Produce accurate and timely security documentation and reporting for internal leadership and external reviewers across all applicable compliance domains. Documentation may include compliance status reports, risk registers, audit evidence packages, remediation tracking, and regulatory submissions. Communicate security, risk and compliance status clearly and concisely to non-technical audiences including organizational leadership, legal counsel, and program leadership. Ensure that reporting reflects the full scope of the organization's compliance obligations and does not treat any single framework as the exclusive measure of the organization's security posture

Qualifications:
  • Bachelors degree in information Technology, Information technology, computer science or a related field is required.
  • 5+ years in a cyber security or related position is required
  • Certified information systems security professional and 5 years of experience will be considered if the candidate does not have a degree.
  • Experience in a federal contracting environment is preferred.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Apply