U.S. citizenship required due to access to sensitive government information.
Minimum 5 years in the Defense Industrial Base as a compliance analyst or similar role.
Deep understanding of the 'How' behind NIST controls, beyond just the basic definitions.
CMMC RP, CCP, or CCA certification is mandatory.
Detail-oriented and process-driven organizational skills are essential.
Experience with Managed Service Providers (MSPs) and C3PAOs is beneficial.
Ability to work well in teams but also independently motivated.
Responsibilities
Collaborate with client stakeholders on onboarding and compliance assessments.
Lead a team of analysts in NIST 800-171a gap assessments and remediation projects.
Review client environments to assess compliance with CMMC/NIST controls.
Help clients develop compliant policies and procedures.
Gather documentation for compliance assessments, including network designs and software whitelists.
Suggest solutions to close identified compliance gaps.
Coordinate with Cybersecurity, Engineering, and Support to ensure compliant configurations.
Benefits
Hybrid work opportunity available.
Competitive salary and comprehensive benefits package.
Casual, friendly, and relaxed work environment.
Support for professional growth and development.
Full Job Description
Duties/Responsibilities:
Work directly with IsI Enterprises client stakeholders throughout their onboarding and compliance gap assessment.
Lead and manage a team of analysts through NIST 800-171a gap assessment and remediation projects.
Review client environments and collect evidence to determine the satisfaction of CMMC/NIST controls
Assist clients in the formulation of a compliant set of policies and procedures.
Complete documentation required for a compliance assessment (Network Design Documents, Software Whitelist, etc)
Recommend solutions to remediate identified gaps in compliance.
Work directly with our Cybersecurity, Engineering, and Support departments to ensure all configurations are completed and tested in a compliant manner.
Generate POAM's (Plan of Action and Milestone) documents for the remediation of found gaps
Generate SSP (System Security Plan) documents to reflect deployed tools and assessment results
Interface directly and lead discussions with C3PAO auditors during CMMC Level 2 Audits
Qualifications:
As part of your work at ISI, you will potentially have access to sensitive information from the federal government. Pursuant to applicable regulations, ISI requires that all candidates for this role present proof of U.S. citizenship before hire.
Have at least 5 years of experience in the Defense Industrial Base as a compliance analyst or related position.
Possess a strong technical background and understanding of the "How" for NIST controls and not just the "What"
Must hold a CMMC RP, CCP or CCA certification
Be detail oriented, process driven, and well organized
Have worked for or with an MSP (Managed Service Provider) and C3PAO
Work Well as a team, but also able to maintain motivation when working individually.
Be comfortable speaking and/or presenting to clients and team members
Have professional level verbal and written communications skills
Possess a familiarity with NIST Risk Management Framework and CMMC compliance
Be a self-starter, someone who is always looking to see where they can help.
What we offer:
The salary range for this role is $125,000- 140,000 commensurate with experience
