Security and Compliance Analyst
On-siteFrederick, Maryland, United States
Job Summary
Review, develop, and maintain cybersecurity documentation including policies, procedures, and checklists to support NIST SP 800-171 and CMMC compliance initiatives. Assist in creating System Security Plans and Plans of Action and Milestones (POA&Ms). Participate in security assessments by coordinating evaluations of on-premises and cloud environments, collecting evidence and artifacts, and documenting results. Collaborate with internal teams to solve client concerns and provide cost-effective solutions while maintaining applied knowledge of DFARS, FedRAMP, and other associated standards. This role supports the US defense industrial base in managing cyber threats and showcasing cybersecurity maturity for DoD supply chain opportunities.
Required Qualifications
- CMMC Certified Professional (CCP) with favorable T3 background clearance
- Understanding of CMMC 2.0, NIST SP.800-171, NIST SP.800-171A, NIST SP.800-53, NIST SP.800-53A, FedRAMP Moderate and/or other similar regulations and industry standards with the proficiency to rapidly retain a deeper understanding of the requirements
- Strong interpersonal communication skills and curiosity to continuously learn
- Excellent organizational skills with ability to prioritize project workloads
- Proficient in Microsoft Office Online/Microsoft 365 (Word, PowerPoint, Excel, Outlook)
- Creative and innovative thinking, problem solving and analytical skills
- Possess strong customer service skills and customer-focused mindset
- Must maintain a high degree of integrity, confidentiality, and privacy
- Working understanding of IT and Infrastructure acronyms and definitions
Desired Qualifications
- Preference for candidates that hold an intermediate certification required to be a CMMC Certified Assessor (CCA)
- Bachelor's degree in information technology, communications, and/or related fields or a combination of industry certifications (e.g. – Security+, A+, Network+, or various Microsoft Cloud certifications) and experience that equates to that knowledge
- Experience with technical, procedure, and policy writing
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.