Senior Security Analyst / Information Security & Compliance / Hybrid / Atlanta, GA

Our client, one of the largest airlines in the world, is seeking an experienced Senior Security Analyst to join its Enterprise Information Security team. This position is ideal for an information security professional with deep expertise in government cybersecurity compliance, NIST frameworks, CMMC, and security governance.

In this role, you’ll partner with business leaders, IT teams, auditors, and security professionals to strengthen the organization’s security posture by developing security policies, ensuring regulatory compliance, supporting audits, and leading strategic security initiatives. This is an excellent opportunity to make a measurable impact within a large enterprise environment while working on high-profile security and compliance programs.

Contract Duration: 12+ Months

Required Skills & Experience

• 6+ years of Information Security, Cybersecurity, IT Risk, or Compliance experience
• Extensive knowledge of NIST 800-171 and NIST 800-53 security frameworks
• Previous experience supporting Cybersecurity Maturity Model Certification (CMMC) compliance
• Experience developing and maintaining System Security Plans (SSPs)
• Experience conducting security audits, control testing, and compliance assessments

Desired Skills & Experience

• Experience supporting aviation, transportation, or other critical infrastructure organizations
• Disaster recovery and business continuity planning
• Security awareness training and governance programs

What You Will Be Doing
Daily Responsibilities

• Lead information security initiatives and compliance projects across multiple business and technology teams
• Analyze the enterprise security environment and recommend safeguards that protect critical information assets
• Develop, maintain, and improve System Security Plans (SSPs) and related security documentation
• Interpret and implement NIST 800-171, NIST 800-53, CMMC, and other government security requirements
• Partner with business stakeholders, auditors, risk teams, and IT leadership to ensure regulatory compliance
• Develop, maintain, and communicate security policies, standards, and procedures
• Lead project planning activities including schedules, cost estimates, status reporting, and risk tracking