OverviewDecisionPoint seeks a
Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program.
The Security / CCRI Analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The analyst will coordinate inspection preparation, evidence collection, assessment-team support, and corrective actions associated with scheduled and unscheduled cybersecurity inspections.
This role will also incorporate Government-provided scan results and remediation status into CCRI readiness reporting, maintain applicable cybersecurity procedures and policy records, and support validation of network and managed-services access requests.
This position is remote, with a preference for candidates located in the Chicago area.
Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.
Duties & ResponsibilitiesThe Security / CCRI Analyst will:
- Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.
- Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
- Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies.
- Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
- Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
- Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.
- Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.
- Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.
- Maintain accurate CCRI status, findings, remediation, and results reporting.
- Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
- Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.
- Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.
- Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.
- Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.
- Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.
- Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.
- Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.
- Track Government comments, questions, and requests for additional evidence through resolution.
- Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.
- Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.
- Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.
- Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.
- Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.
- Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.
- Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.
QualificationsRequired Qualifications- Active Secret clearance or higher.
- Bachelor's degree in Cybersecurity, Information Systems, or a related field.
- Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.
- Current CompTIA Security+ certification.
Preferred Qualifications - Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification.
- Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments.
- Experience preparing organizations for scheduled and unscheduled cybersecurity inspections.
- Experience maintaining enterprise findings registers and tracking corrective actions through validated closure.
- Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation.
- Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting.
- Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
- Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams.
- Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting.
- Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements.
- Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation.
- Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms.
- Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings.
- Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials.
- Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
- Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills.
- Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment.
