[Hiring] Senior Security / Command Cyber Readiness Inspection Analyst @DecisionPoint | Cortek

Role Description

DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program. The Security / CCRI Analyst will:

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.
• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
• Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies.
• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
• Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.
• Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.
• Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.
• Maintain accurate CCRI status, findings, remediation, and results reporting.
• Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.
• Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.
• Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.
• Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.
• Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.
• Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.
• Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.
• Track Government comments, questions, and requests for additional evidence through resolution.
• Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.
• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.
• Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.
• Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.
• Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.
• Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.
• Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.

Qualifications

• Active Secret clearance or higher.
• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.
• Current CompTIA Security+ certification.

Requirements

• Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification.
• Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments.
• Experience preparing organizations for scheduled and unscheduled cybersecurity inspections.
• Experience maintaining enterprise findings registers and tracking corrective actions through validated closure.
• Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation.
• Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting.
• Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
• Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams.
• Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting.
• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements.
• Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation.
• Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms.
• Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings.
• Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials.
• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
• Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills.
• Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment.

Company Description