What are the responsibilities and job description for the Cybersecurity Controls & Compliance Analyst position at Edgewater Federal Solutions, Inc.?
Overview
This position supports the U.S. Department of Energy Office of Scientific and Technical Information (DOE OSTI) in its mission to ensure the long-term preservation and accessibility of DOE scientific and technical information. The role focuses on assessing cybersecurity controls, supporting audit readiness, and ensuring compliance with federal cybersecurity frameworks and OSTI’s internal policies. This is onsite in Oak Ridge, TN.
Responsibilities
Essential Duties & Responsibilities:
Responsibilities include, but are not limited to the following:
- Evaluate and document the effectiveness of cybersecurity controls across OSTI’s network and systems.
- Support internal and external audits, including evidence collection, control mapping, and remediation tracking.
- Conduct risk assessments and gap analyses aligned with NIST, FISMA, and DOE cybersecurity requirements.
- Collaborate with system owners and technical teams to ensure security controls are implemented and maintained.
- Monitor compliance with OSTI’s cybersecurity policies, procedures, and standards.
- Maintain and update system security plans (SSPs), risk registers, and control documentation.
- Assist in the development and refinement of cybersecurity governance processes.
- Analyze security event data to identify control weaknesses and recommend improvements.
- Support the implementation of continuous monitoring strategies and reporting mechanisms.
- Coordinate with third-party cybersecurity teams and federal oversight bodies as needed.
- Prepare technical documentation and compliance reports for internal and external stakeholders.
- Stay current on cybersecurity regulations, audit trends, and best practices.
- Assist with installation, configuration, and maintenance of security tools used for compliance monitoring.
- Perform other duties as assigned.
Qualifications
Education, Training, Experience
- High school diploma required.
- Prefer degree or coursework in cybersecurity, information assurance, audit, or related field.
- Minimum of 3 years’ experience in cybersecurity, audit, or compliance roles.
Knowledge, Skills, Abilities
- Possesses a strong understanding of cybersecurity frameworks (e.g., NIST SP 800-53, FISMA, RMF), implementing and adapting them to specific organizational needs.
- Performs risk assessments, identifies control gaps, and recommends strategic remediation efforts based on organizational risk appetite.
- Supports audits, leads audit responses and compliance assessments, coordinates evidence collection, and develops corrective action plans in a federal or regulated environment.
- Leverages SIEM tools (e.g., Splunk), vulnerability management, and control monitoring platforms.
- Works independently and collaboratively across technical and non-technical teams.
- Exhibits excellent analytical, documentation, and communication skills.
- Detail-oriented with a commitment to quality assurance and continuous improvement.
- Manages multiple projects and deadlines in a fast-paced environment.
- Maintains a high level of initiative, customer service, and professional growth mindset.
Ability to provide proof of US Citizenship on your first day of employment to obtain a DOE HSPD-12 Badge in accordance with the terms of the contract. Department of Energy OSTI's policy direction requires all employees employed on this contract to be citizens of the United States.
About Us:
Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018 through 2025.
It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other statuses protected by applicable law. #LISW