Junior Information Security Analyst

Position Overview

Creative Visions is seeking a Junior Information Security Analyst to support federal cybersecurity assessment and continuous monitoring activities. This role supports Security Control Assessments (SCA), FISMA compliance efforts, and ongoing cybersecurity operations across federal systems.

The Junior Analyst will assist senior team members in evaluating security controls, collecting and validating system data, and preparing documentation to support authorization and continuous monitoring activities.

Key Responsibilities

• Support Security Control Assessment (SCA) activities, including data collection, evidence gathering, and validation of security controls
• Assist in evaluating system security posture against NIST SP 800-53 controls and federal cybersecurity requirements
• Collect, track, and validate cybersecurity data (e.g., system configurations, vulnerabilities, control implementation status)
• Support development and updates of security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts
• Assist in identifying security findings and tracking remediation actions
• Participate in stakeholder coordination, including follow-ups with system owners for required inputs
• Support continuous monitoring activities, including vulnerability tracking and reporting
• Maintain organized records of assessment activities and ensure documentation is complete and audit-ready

Required Qualifications

• 1–3 years of relevant experience in information security, cyber risk management, network defense, or IT system administration with a security focus
  • Experience may include internships, co-op roles, or hands-on cybersecurity training programs
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field
  • OR Associate degree plus 2 additional years of relevant experience
• CompTIA Security CE (or equivalent) – REQUIRED

Preferred Qualifications

• CompTIA Network , Certified Ethical Hacker (CEH), or Certified Authorization Professional (CAP)
• Familiarity with:
  • NIST SP 800-53 security controls
  • FISMA compliance and federal cybersecurity standards
  • Vulnerability scanning tools (e.g., Nessus, Tenable)
  • Basic networking and system administration concepts
• Experience supporting:
  • Security assessments or audits
  • Continuous monitoring programs
  • Federal or regulated environments

Key Skills

• Strong attention to detail and ability to follow defined processes
• Ability to analyze and organize technical information clearly
• Effective written and verbal communication skills
• Ability to work collaboratively in a team environment