Associate, Compliance Advisor
Primary Purpose and Goal of Role
The Associate, Compliance Advisor supports Quzara's cybersecurity advisory practice by assisting federal and commercial clients with implementing, maintaining, and assessing security and compliance programs. This role supports security assessment and authorization (SA&A) activities, continuous monitoring, and governance initiatives across frameworks including FedRAMP, NIST RMF, FISMA, and DoD IL4/5. Works closely with engineering teams, compliance advisors, auditors, and client stakeholders, the Associate helps identify compliance gaps, validate security control implementation, coordinate remediation efforts, and develop the documentation required to support authorization and ongoing compliance. This role requires strong analytical abilities, excellent documentation skills, and the ability to communicate effectively with both technical and non-technical stakeholders.
Responsibilities
- Support Security Assessment & Authorization (SA&A) activities by coordinating and tracking Authorization to Operate (ATO) documentation and authorization packages
- Conduct compliance gap assessments and identify risks across customer cloud and hybrid environments
- Coordinate with engineering and technical teams to validate implementation of technical, operational, and management security controls
- Perform vulnerability and compliance assessments, analyze scan results, and provide recommendations for remediation
- Audit security controls to validate compliance with FedRAMP, NIST RMF, FISMA, DoD IL4/5, and other applicable governance requirements
- Manage and track Plans of Action & Milestones (POA&Ms), including remediation activities, status reporting, and risk reduction efforts
- Support Continuous Monitoring (ConMon) activities by reviewing security documentation, scan results, logs, and system evidence to validate ongoing compliance
- Develop, maintain, and update security documentation including:
- System Security Plans (SSPs)
- Standard Operating Procedures (SOPs)
- Security Policies & Procedures
- Technical Implementation Documentation
- Interview subject matter experts to gather technical and operational information required for compliance documentation
- Develop compliance metrics, dashboards, and status reporting to measure program effectiveness and identify areas for improvement
- Support proposal development and technical responses to customer requests, ensuring alignment with applicable regulatory requirements
- Produce and maintain technical diagrams and architecture illustrations using Microsoft Visio or similar diagramming tools
REQUIREMENTS
- Bachelor’s degree in human resources management or equivalent
- SPHR or other HR certification preferred
- Minimum five years in human resources, preferably in a professional service or technology environment
- Minimum two years working in a virtual environment
- Experience with ADP preferred
- Authorized to work in the United States without the need for visa sponsorship now or in the future
- Proficient in WORD, Excel, PowerPoint, Outlook, TEAMS
- Excels in employee relations
- Ability to recruit high caliber technology professionals with federal government experience
- Maintain and adjust HR policies to ensure clarify and ensure policy awareness within organization
- Comfortable collaborating in a virtual environment
- Ability to clearly articulate to management, field leads, and others preferred courses of action and rationale
- Identify legal issues and able to escalate timely when appropriate
- Ensure employee privacy in accordance with federal and state laws