Join a dynamic Information Security Compliance team supporting government compliance and broader cybersecurity governance initiatives. This role is ideal for a detail-oriented professional who enjoys translating complex regulatory requirements into practical controls, documentation, and audit-ready processes.

Responsibilities

• Support government compliance efforts by helping ensure alignment with applicable regulatory and cybersecurity requirements.
• Review, collect, and validate control evidence to support audits, assessments, and compliance activities.
• Research new or changing regulations and summarize key impacts for leadership and stakeholders.
• Help develop, maintain, and improve policies, procedures, and documentation that support consistent compliance operations.
• Respond to third-party risk management questionnaires and related compliance requests.
• Contribute to special projects focused on emerging regulatory and cybersecurity needs.
• Assist with the identification, implementation, and management of security controls across IT environments.
• Partner with technical teams on security measures, incident response support, access management, and vulnerability mitigation.
• Support risk assessments, security testing, and audit readiness activities.
• Help strengthen security awareness and compliance practices across the organization.

Skills

• Experience in information technology audit or compliance work, including validating evidence for control effectiveness.
• Strong working knowledge of NIST SP 800-171 or comparable frameworks such as NIST SP 800-53, NIST CSF, ISO/IEC 27001/27002, FedRAMP, PCI DSS, or CIS Controls.
• Ability to research regulations and communicate concise, actionable summaries.
• Excellent written and verbal communication skills across a variety of audiences.
• Ability to work independently, prioritize tasks, and deliver clear results.
• Experience drafting, interpreting, and maintaining policies and procedures.
• Familiarity with collecting audit evidence and supporting assessments.
• Solid understanding of core IT domains, including information security, network architecture, and cloud computing.
• Background in Governance, Risk, and Compliance or a similar function.

Preferred Skills

• Experience supporting U.S. government IT compliance requirements.
• Experience building or maintaining System Security Plans (SSPs).
• Project management experience with the ability to coordinate actions across teams.
• Familiarity with emerging AI tools and technologies, including their productivity benefits and related security or compliance considerations.
• Experience in the aviation industry.
• One or more relevant certifications in good standing, such as CISSP, CISA, or CRISC.

Horizontal is committed to fostering a workplace where diversity, equity, and inclusion are valued and respected. We welcome candidates with a wide range of backgrounds, experiences, and perspectives who can contribute to a collaborative and inclusive environment.