Senior Security, CCRI Analyst

Vaga não está no LinkedIn

🕒 Outubro 21

🌽 Illinois – Remoto

🌽 Illinois – Remote

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 25%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

DecisionPoint Corporation

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2011

🎖️ Defesa

💼 Consultoria

📦 Logística

Defense • Consulting • Logistics

A DecisionPoint Corporation é uma Pequena Empresa de Propriedade de Veteranos com Deficiência em Serviço, especializada em modernização de TI e transformação digital para agências governamentais. Eles oferecem serviços abrangentes, incluindo cibersegurança, TI para saúde e soluções de automação inteligente, visando melhorar a eficiência e a eficácia operacional, ao mesmo tempo em que garantem uma migração segura para a nuvem. Sua abordagem de Centros de Excelência impulsiona o sucesso da missão, abordando os desafios mais urgentes enfrentados por entidades governamentais por meio de tecnologia inovadora e suporte especializado.

Descrição

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings • Record finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status • Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies • Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions • Review closure evidence for completeness, accuracy, traceability, and consistency with identified findings • Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership • Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements • Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports • Maintain accurate CCRI status, findings, remediation, and results reporting • Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections • Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials • Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams • Organize inspection evidence so each artifact is current, approved, traceable, and mapped to the applicable requirement or finding • Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions • Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards • Assist with planning, executing, documenting, and monitoring post-inspection corrective actions • Track Government comments, questions, and requests for additional evidence through resolution • Support validation of network-access and managed-services access requests with service-operations and cybersecurity personnel • Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation • Monitor changes to federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates • Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials • Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues • Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings • Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities

🎯 Requisitos

• Active Secret clearance or higher • Bachelor’s degree in Cybersecurity, Information Systems, or a related field • Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience • Current CompTIA Security+ certification • Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification preferred • Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments preferred • Experience preparing organizations for scheduled and unscheduled cybersecurity inspections preferred • Experience maintaining enterprise findings registers and tracking corrective actions through validated closure preferred • Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation preferred • Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting preferred • Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards preferred • Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams preferred • Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting preferred • Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements preferred • Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation preferred • Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms preferred • Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings preferred • Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials preferred • Familiarity with current DoD 8140 cybersecurity workforce qualification requirements preferred • Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills • Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment

🏖️ Benefícios

• Regular full-time employment • Remote work arrangement • Opportunity to support a USMEPCOM ENLIST government cybersecurity program • Opportunity to work on cybersecurity compliance, CCRI inspection readiness, findings management, and corrective actions

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo