Senior Security

Overview DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program.  The Security / CCRI Analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The analyst will coordinate inspection preparation, evidence collection, assessment-team support, and corrective actions associated with scheduled and unscheduled cybersecurity inspections.  This role will also incorporate Government-provided scan results and remediation status into CCRI readiness reporting, maintain applicable cybersecurity procedures and policy records, and support validation of network and managed-services access requests.  This position is remote, with a preference for candidates located in the Chicago area.  Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid. Duties & Responsibilities The Security / CCRI Analyst will:  * Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings. 
* Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status. 
* Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies. 
* Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions. 
* Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding. 
* Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership. 
* Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements. 
* Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports. 
* Maintain accurate CCRI status, findings, remediation, and results reporting. 
* Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards. 
* Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections. 
* Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials. 
* Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams. 
* Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding. 
* Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions. 
* Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards. 
* Assist with planning, executing, documenting, and monitoring post-inspection corrective actions. 
* Track Government comments, questions, and requests for additional evidence through resolution. 
* Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel. 
* Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation. 
* Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures. 
* Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials. 
* Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues. 
* Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings. 
* Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.  Qualifications Required Qualifications  * Active Secret clearance or higher. 
* Bachelor’s degree in Cybersecurity, Information Systems, or a related field. 
* Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience. 
* Current CompTIA Security+ certification.  Preferred Qualifications  * Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification. 
* Experience supporting Command Cyber Readiness Inspections or comparable