Senior Security, CCRI Analyst

Job not on LinkedIn

🔥 6 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

🎖️ Defense

💼 Consulting

📦 Logistics

Defense • Consulting • Logistics

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

📋 Description

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings • Record finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status • Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies • Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions • Review closure evidence for completeness, accuracy, traceability, and consistency with identified findings • Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership • Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements • Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports • Maintain accurate CCRI status, findings, remediation, and results reporting • Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections • Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials • Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams • Organize inspection evidence so each artifact is current, approved, traceable, and mapped to the applicable requirement or finding • Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions • Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards • Assist with planning, executing, documenting, and monitoring post-inspection corrective actions • Track Government comments, questions, and requests for additional evidence through resolution • Support validation of network-access and managed-services access requests with service-operations and cybersecurity personnel • Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation • Monitor changes to federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates • Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials • Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues • Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings • Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities

🎯 Requirements

• Active Secret clearance or higher • Bachelor’s degree in Cybersecurity, Information Systems, or a related field • Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience • Current CompTIA Security+ certification • Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification preferred • Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments preferred • Experience preparing organizations for scheduled and unscheduled cybersecurity inspections preferred • Experience maintaining enterprise findings registers and tracking corrective actions through validated closure preferred • Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation preferred • Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting preferred • Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards preferred • Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams preferred • Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting preferred • Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements preferred • Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation preferred • Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms preferred • Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings preferred • Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials preferred • Familiarity with current DoD 8140 cybersecurity workforce qualification requirements preferred • Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills • Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment

🏖️ Benefits

• Regular full-time employment • Remote work arrangement • Opportunity to support a USMEPCOM ENLIST government cybersecurity program • Opportunity to work on cybersecurity compliance, CCRI inspection readiness, findings management, and corrective actions