Senior Security, CCRI Analyst

atDecisionPoint CorporationRemote

Illinois Full-time Cybersecurity / Security EngineerSenior

Posted Oct 22

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Oversee the enterprise cybersecurity findings register, serving as the definitive record for inspection, evaluation, compliance, and remediation results.

• Document descriptions of findings, impacted assets, risk levels, remediation responsibilities, milestones, dependencies, deadlines, evidence, and closure status.

• Develop, revise, and monitor Plans of Action & Milestones (POA&Ms) related to Command Cyber Readiness Inspection (CCRI) findings and other cybersecurity issues.

• Monitor POA&M milestones, corrective actions, due dates, progress, supporting evidence, and closure decisions from the Government.

• Assess closure evidence for completeness, precision, traceability, and alignment with identified findings.

• Escalate overdue, high-risk, recurring, or inadequately resolved findings to cybersecurity and program leadership.

• Aggregate cybersecurity information for FISMA, IAVM, Monthly Status Reports, and other Government reporting obligations.

• Integrate Government-provided scan results, compliance-check outcomes, and remediation status into CCRI readiness reports.

• Ensure accurate reporting on CCRI status, findings, remediation, and outcomes.

• Coordinate the preparation for both scheduled and unscheduled CCRI assessments and related cybersecurity inspections.

• Create and maintain inspection-readiness timelines, evidence requests, checklists, trackers, and preparation materials.

• Collaborate on evidence collection across infrastructure, application, operations, cybersecurity, asset management, and Government teams.

• Organize inspection evidence to ensure each artifact is current, authorized, traceable, and aligned with the relevant requirement or finding.

• Assist Government and external assessment teams during inspections by managing requests, gathering documentation, and tracking follow-up actions.

• Coordinate technical scan and policy compliance evidence necessary to demonstrate operational resilience and adherence to applicable standards.

• Aid in the planning, execution, documentation, and monitoring of post-inspection corrective actions.

• Track Government feedback, inquiries, and requests for additional evidence until resolution.

• Support the validation of network-access and managed-services access requests in collaboration with service-operations and cybersecurity personnel.

• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.

• Monitor updates to federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify necessary modifications.

• Prepare summaries of findings, risk assessments, trend reports, status dashboards, and executive-level briefing documents.

• Identify recurring findings, systemic compliance deficiencies, weak corrective actions, and issues related to evidence quality.

• Suggest improvements in processes, policies, controls, and documentation to enhance inspection readiness and minimize repeat findings.

• Maintain comprehensive records that support the resolution of findings, POA&M closure, Government reporting, and future inspection activities.

⛳️ Requirements

• Active Secret clearance or higher.

• Bachelor’s degree in Cybersecurity, Information Systems, or a related discipline.

• At least 10 years of relevant experience in cybersecurity, information assurance, compliance, inspection readiness, or information security.

• Current CompTIA Security+ certification.

• Current ISC2 Certified in Governance, Risk, and Compliance (CGRC) certification is preferred.

• Experience in supporting Command Cyber Readiness Inspections or similar DoD cybersecurity evaluations is preferred.

• Familiarity with preparing organizations for both scheduled and unscheduled cybersecurity inspections is preferred.

• Experience in maintaining enterprise findings registers and tracking corrective actions through validated closure is preferred.

• Proficiency in creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation is preferred.

• Experience in consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting is preferred.

• Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards is preferred.

• Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams is preferred.

• Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting is preferred.

• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and relevant DoD cybersecurity requirements is preferred.

• Experience in maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation is preferred.

• Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or other comparable governance and workflow platforms is preferred.

• Experience in developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings is preferred.

• Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials are preferred.

• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements is preferred.

• Strong organizational, analytical, technical writing, communication, and stakeholder coordination skills.

• Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective action activities within a structured compliance environment.