SAP Security Risk & Compliance Analyst (TS/SCI #26-126) in Arlington, Virginia at Strategic Analysis, Inc.

The SAP Security Risk & Compliance Analyst serves as a trusted advisor responsible for assessing, evaluating, and improving the security posture of Special Access Programs (SAP), Sensitive Compartmented Information (SCI), and other classified programs. This position provides comprehensive security compliance, risk management, and assessment support by evaluating security programs against applicable government regulations, customer requirements, and industry best practices.
Working collaboratively with government representatives, program leadership, contractors, and multidisciplinary security teams, the analyst identifies security vulnerabilities, recommends corrective actions, and helps organizations maintain compliance while supporting mission success. This role requires strong analytical skills, sound risk-based decision making, exceptional communication abilities, and experience interpreting complex security requirements across multiple security disciplines.

Responsibilities:

• Conduct comprehensive security compliance reviews, inspections, assessments, and self-inspections for Special Access Programs (SAP), Sensitive Compartmented Information (SCI), and classified environments.
• Evaluate security programs against applicable government directives, contractual requirements, security standards, and organizational policies.
• Analyze security findings to identify vulnerabilities, trends, and systemic risks while developing practical risk mitigation recommendations.
• Prepare detailed compliance reports, executive summaries, risk assessments, corrective action plans, and briefing materials for leadership.
• Advise program managers, security professionals, and organizational leadership regarding security compliance requirements, inspection readiness, and risk management strategies.
• Assess the effectiveness of security controls across personnel, physical, information, industrial, operational, and cybersecurity disciplines.
• Support incident response activities by evaluating security incidents, conducting root cause analysis, documenting findings, and recommending corrective actions.
• Monitor corrective actions through completion and verify resolution of identified compliance deficiencies.
• Interpret and apply government security regulations, contractual requirements, and customer guidance to support consistent program execution.
• Develop, maintain, and improve security policies, standard operating procedures, compliance guidance, and risk management processes.
• Provide consultation to internal and external stakeholders regarding security requirements, inspection preparation, and continuous compliance initiatives.
• Develop and present executive briefings, customer presentations, and security training supporting compliance awareness and organizational readiness.
• Identify opportunities to improve inspection processes, reporting methodologies, security metrics, and operational efficiencies.
• Support multidisciplinary security initiatives involving personnel security, physical security, information security, industrial security, facility security, and cybersecurity.

Required Qualifications:

• Active TS/SCI with current CI Poly
• 7+ years' experience in the following areas:
o Supporting Special Access Programs (SAP), SCI, or other classified security programs.
o Conducting compliance inspections, security assessments, audits, or program reviews.
o Performing security risk analysis and developing risk-based recommendations.
o Preparing formal reports, executive briefings, and corrective action documentation.
o Interpreting and applying government security policies, regulations, and contractual security requirements.
• Demonstrated ability to communicate effectively with executive leadership, government representatives, and technical personnel.
• Strong analytical, organizational, investigative, and problem-solving skills.
• Ability to independently manage multiple assessments and competing priorities.

Education & Experience:

One of the following is required:
• Bachelor's degree in Criminal Justice, Intelligence Studies, Cybersecurity, Information Assurance, Homeland Security, Business Administration, or a related field; OR
• Associate degree with additional directly related experience; OR
• Completion of military, government, or industry security training programs with progressively responsible experience supporting classified security programs; OR
• An equivalent combination of education, specialized training, professional certifications, and directly related experience.
Relevant security certifications, government training, military education, and demonstrated expertise may be substituted for a formal degree.