Salary*:$120,000+
*Dependent upon qualifications
Essential FunctionsThe Senior Compliance Analyst assists Summit 7 and our clients in meeting key cybersecurity compliance initiatives including Cybersecurity Maturity Model Certification (CMMC) certification documentation preparation, readiness, and assessment activities.
Candidates with more experience will be considered at a senior level.
Duties and Responsibilities- Review, develop, update, and/or maintain cyber security documentation which may include policies, plans, procedures, checklists, and work instructions
- Assist in development and maintenance of System Security Plans, Plans of Action and Milestones (POA&MS), security and compliance-related information system monitoring schedules and related tasks
- Participate in security assessments including coordination, evaluation of on premises and cloud environments, collection of evidence and artifacts, and documenting results
- Work collaboratively with internal teams to maintain applied knowledge of NIST 800-171, DFARS [redacted] and other associated standards and regulations related to CMMC certification
- Leverage growing knowledge and expertise to identify client problem areas and collaborate to provide effective suggestions for solutions
- Other duties as assigned
Requirements- Associate's degree in information technology, communications, or related fields with 3+ years of relevant experience, or a combination of industry certifications and experience that equates to that knowledge
- Demonstrated understanding of NIST SP.800-171, NIST SP.800-171A, NIST SP.800-53, NIST SP.800-53A, FedRAMP and/or other similar federal government regulations and industry standards
- CMMC Certified Professional (CCP). Highly qualified candidates who do not possess this certification may be considered - they must obtain within 6 months of hire at their own cost.
- Ability to pass an extensive background check
- Strong written and interpersonal communication skills; experience with technical writing, procedure and policy writing preferred
- Excellent organizational skills with ability to prioritize
- Proficient in Microsoft Office Online/Microsoft 365 (Word, PowerPoint, Excel, Outlook)
- Creative and innovative thinking, problem solving and analytical skills
- Possess strong customer service skills and customer-focused mindset
- Must maintain a high degree of integrity, confidentiality, and privacy
- Desire to ask questions and learn quickly
- Working understanding of IT and Infrastructure acronyms and definitions
Export Control Notice: This position may involve access to information subject to U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR). Qualified applicants will be considered regardless of national origin or immigration status. If a candidate does not meet the definition of a "U.S. Person" (as defined in 22 CFR 120.15), the company will assess whether an export license is required. If a license is required, any offer of employment will be contingent upon the candidate's eligibility for, and the company's ability to obtain, such a license in accordance with U.S. law. A "U.S. Person" includes U.S. citizens, lawful permanent residents, asylees, and refugees.
