[Hiring] Senior Security / Command Cyber Readiness Inspection Analyst @DecisionPoint

Role Description

DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program. This position is remote, with a preference for candidates located in the Chicago area.

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.
• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
• Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies.
• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
• Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.
• Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.
• Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.
• Maintain accurate CCRI status, findings, remediation, and results reporting.
• Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.
• Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.
• Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.
• Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.
• Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.
• Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.
• Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.
• Track Government comments, questions, and requests for additional evidence through resolution.
• Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.
• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.
• Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.
• Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.
• Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.
• Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.
• Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.

Qualifications

• Active Secret clearance or higher.
• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.
• Current CompTIA Security+ certification.

Requirements

• Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification.
• Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments.
• Experience preparing organizations for scheduled and unscheduled cybersecurity inspections.
• Experience maintaining enterprise findings registers and tracking corrective actions through validated closure.
• Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation.
• Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting.
• Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
• Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams.
• Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting.
• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements.
• Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation.
• Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms.
• Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings.
• Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials.
• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
• Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills.
• Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment.

Company Description

DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.