Cybersecurity Compliance Analyst

At ICEYE, we design, build and operate the largest fleet of Synthetic Aperture Radar (SAR) satellites in the world. Using advanced technology, our constellation collects topographical data about any location on Earth, day or night, through any weather conditions.

Headquartered in Southern California, our customers are society’s heroes – intelligence professionals, warfighters, first responders, and scientific researchers. As a trusted mission partner, the United States and its allies depend on us for critical information when it matters most.

Role Description

The Cybersecurity Compliance Analyst is responsible for supporting and maintaining ICEYE US cybersecurity compliance programs through continuous assessment, documentation, evidence management, and audit readiness activities. This role works closely with Cybersecurity, IT, Engineering, DevOps, Legal, and other business stakeholders to evaluate security controls and demonstrate compliance with applicable regulatory, contractual, customer, and industry requirements. The position supports internal and external assessments by maintaining accurate compliance artifacts, identifying control gaps, and tracking remediation activities through completion. This role is a key contributor to ensuring ICEYE US can continuously demonstrate an effective and sustainable cybersecurity compliance posture.

Responsibilities

Coordinate ongoing compliance activities for cybersecurity frameworks and requirements including CMMC, NIST SP 800-171, NIST CSF, ISO 27001, SOC 2, and applicable customer or contractual requirements.

Collect, review, validate, organize, and maintain cybersecurity compliance evidence and supporting documentation.

Perform security control assessments, gap analyses, and compliance reviews to identify deficiencies and areas requiring remediation in coordination with the Head of Cybersecurity.

Track identified compliance findings, corrective actions, Plans of Action and Milestones (POA&Ms), and remediation activities through closure.

Support internal audits, external assessments, customer security reviews, regulatory examinations, and third-party compliance activities.

Maintain policies, procedures, standards, system documentation, control narratives, and other artifacts required to demonstrate compliance.

Coordinate with control owners and technical teams to obtain evidence, validate control implementation, and document how cybersecurity requirements are satisfied.

Support the completion and validation of customer security questionnaires, due diligence requests, and other cybersecurity compliance inquiries.

Maintain cybersecurity compliance records and supporting artifacts within applicable Governance, Risk, and Compliance (GRC) platforms or repositories.

Monitor changes to applicable cybersecurity requirements and assist with updating controls, documentation, policies, and compliance activities accordingly.

Prepare compliance status reporting, metrics, risk summaries, and remediation updates for the Head of Cybersecurity and other stakeholders.

Support continuous improvement of cybersecurity governance, compliance processes, evidence collection, control monitoring, and audit readiness.

Required Qualifications

Bachelor's degree in Cybersecurity, Information Security, Information Technology, Information Systems, Business, Risk Management, or a related discipline, or equivalent relevant professional experience.

2+ years of experience in cybersecurity compliance, governance, risk management, IT audit, information security, or a related GRC function.

Experience supporting cybersecurity compliance activities against frameworks or standards such as NIST SP 800-171, CMMC, NIST CSF, ISO 27001, SOC 2, or comparable requirements.

Experience collecting and maintaining audit evidence, compliance documentation, policies, procedures, control narratives, or other governance artifacts.

Experience performing control assessments, gap analyses, audit support, or remediation tracking.

Ability to interpret cybersecurity requirements and work with technical and business stakeholders to document how security controls are implemented and maintained.