IT & Compliance Support Analyst

Position: IT & Compliance Support Analyst (#2072)

Location: Huntsville, AL

Clearance: TS/SCI Eligible (preferred)

Compass is looking for a highly motivated, highly capable resource to join our small team to provide IT support and technical assistance to our employees. In this role, your primary responsibility will be to provide exceptional services to our IT customers, as well as contributing to the evolution of our ISO Certified processes. This includes ensuring optimal use of our hardware and software technologies, enhancing system performance, and securing data. You will also be required to advise on IT equipment upgrades.

This position will contribute to increased productivity by ensuring that company IT systems run efficiently. Proficiency and knowledge of ISO 20000-1:2018 and 27001:2013 are highly desired. This position is expected to grow with the company as we mature our ISO IT policies and procedures.

Position Description

The IT & Compliance Support Analyst provides entry‑to‑junior-level support across information technology operations and compliance activities, including ISO management systems and Cybersecurity Maturity Model Certification (CMMC) requirements. This role supports day‑to‑day hardware, software, and networking tasks while assisting with documentation, evidence collection, and control maintenance under the guidance of senior staff. The position is designed for an early‑career professional seeking hands‑on experience in both IT operations and cybersecurity compliance within a regulated environment.

Key Duties

IT Operations Support (Primary)

• Provide Tier 1 / basic Tier 2 support for end‑user hardware, software, and connectivity issues.
• Assist with workstation setup, troubleshooting, imaging, and asset tracking.
• Support user account administration tasks (e.g., account provisioning, access changes) under established procedures.
• Assist with inventory tracking of IT assets and peripherals.
• Assist with routine network troubleshooting, including connectivity, printers, and peripherals.
• Document issues, resolutions, and procedures in ticketing and knowledge systems.
• Use Microsoft 365 Administrative tools, such as Azure, Intune, and SharePoint.
• Escalate complex issues appropriately to senior IT staff.

Compliance & Security Support (Primary)

• Assist with ISO management system activities (e.g., ISO 9001, ISO 20000-1, ISO 27001), including:
• Updating and maintaining policies, procedures, and logs
• Supporting internal audit preparation
• Tracking corrective and preventive actions
• Support CMMC compliance activities under supervision, including:
• Evidence collection and organization
• POA&M tracking and updates
• Control implementation documentation
• Help maintain compliance artifacts, registers, and records in support of audits and assessments.
• Follow established security policies and report potential security issues promptly.
• Participate in internal reviews or audits as a note‑taker or assistant.
• Follow established cybersecurity practices and report deviations or concerns.

Administrative & Support Functions

• Assist with IT and compliance documentation organization and version control.
• Support periodic reviews of system inventories, access lists, and control checklists.
• Participate in training, tabletop exercises, or audits as needed.
• Maintain organized electronic file structures for IT and compliance records.
• Assist with updating procedures and work instructions as changes occur.
• Ensure version control and proper labeling of compliance documents.
• Support process improvement initiatives by identifying documentation gaps.
• Perform other related duties assigned in support of IT and compliance goals.

Required

• Foundational understanding of:
• Windows operating systems
• Basic networking concepts (TCP/IP, DNS, DHCP)
• General cybersecurity principles
• Microsoft 365 Administration (Azure, Intune, SharePoint, etc.)
• Strong organizational skills and attention to detail.
• Ability to follow documented procedures and work within regulated frameworks.
• Clear written and verbal communication skills.

Desired

• Familiarity with ISO standards (ISO 9001, ISO 20000-1, ISO 27001) or CMMC terminology.
• Entry‑level certifications (e.g., CompTIA A+, Network+, Security+).
• Experience with ticketing systems, documentation platforms, or compliance tools.
• Prior exposure to regulated environments or government contracting.

Education

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a closely related field

OR

Equivalent combination of education and hands‑on experience supporting IT operations, technical support, or cybersecurity/compliance activities. Formal education may be offset by relevant work experience, internships, cooperative education, or documented hands‑on technical training.

Certifications

• CompTIA A+,
• CompTIA Network+,
• CompTIA Security+, and/or
• Equivalent entry‑level IT or cybersecurity certifications

Possession of one or more of these certifications may be considered when determining initial placement or compensation but is not a condition of employment .

Work Level

Entry to Junior Professional (Developmental Level)

• Performs defined, recurring tasks and well‑documented processes in support of IT operations and compliance activities.
• Work is procedural and task‑based, focused on execution rather than design, interpretation, or independent decision‑making.
• Contributes to ISO and CMMC efforts by assisting with implementation activities, documentation, and data gathering—not by owning controls, systems, or certifications.
• Expected to build technical and compliance proficiency over time through hands‑on experience and training.

Guidance Required

Moderate to Significant Guidance Required

• Works under close to moderate supervision from Will Schumacher or other designated senior staff.
• Receives clear instructions, templates, and documented procedures.
• Initial work is reviewed regularly for accuracy, completeness, and adherence to established standards.
• Escalates unclear issues, deviations, or risks rather than resolving them independently.
• Decisions with technical, security, or compliance impact are reviewed and approved by senior personnel before implementation.

Compass, Inc. (Compass) is a Small Business (SB) headquartered in Winchester, VA as a Defense and Intelligence solutions provider to the United States Government. We provide Systems Engineering and Technical Assistance (SETA), Advisory and Assistance Services (A&AS), and Systems Engineering and Integration (SE&I) to our government and business partner customers. As a premier Defense and Intelligence solution provider, we employee a diverse, agile, highly trained and extremely talented staff.

Equal Opportunity Employer

Veterans/Disabled