Information Security Analyst

Location:

Employment Type:

About Scrut Automation

Information Security Analyst (1–3 years experience)

U.S. federal frameworks (CMMC and FedRAMP)

Key Responsibilities

• Support customer engagements across ISO 27001, SOC 2, HIPAA, GDPR, CMMC, and FedRAMP.
• Conduct gap assessments and readiness checks specifically for CMMC (Level 2/3) and FedRAMP Moderate/High.
• Assist customers in documenting controls, gathering evidence, and preparing for C3PAO assessments (CMMC) and 3PAO audits (FedRAMP).
• Review cloud security configurations (AWS, Azure, GCP) against CMMC and FedRAMP baselines.
• Maintain up-to-date knowledge of NIST 800-53, NIST 800-171, CMMC model, and FedRAMP requirements.
• Collaborate with clients to design remediation plans for identified gaps, ensuring controls are implemented effectively.
• Draft and maintain security documentation including SSPs (System Security Plans), POA&Ms (Plans of Action & Milestones), and incident response procedures.
• Act as a point of contact for U.S. clients, guiding them through compliance journeys with clear communication and actionable steps.
  

Qualifications

• 1–3 years of experience in information security, risk management, or compliance.
• Hands-on knowledge of ISO 27001, SOC 2, HIPAA, and GDPR frameworks.
• Demonstrated interest or experience in CMMC (NIST 800-171) and FedRAMP (NIST 800-53) compliance.
• Familiarity with security controls in cloud environments (AWS, Azure, GCP).
• Strong written and verbal communication skills for interfacing with U.S. clients.
• Preferred certifications: ISO 27001 LA, CISA, Security+, CCSK, or equivalent.
  

Why Join Scrut Automation?

• Build expertise in high-demand U.S. compliance frameworks (CMMC & FedRAMP).
• Work with global customers and cutting-edge cloud-native companies.
• Exposure to multiple frameworks and industry-leading compliance automation.
• Growth-focused culture with mentorship and fast learning opportunities.
• Competitive pay, benefits, and remote-first flexibility.