Compliance Analyst

Summit 7 Systems•Remote, AL

5d•$65,000 - $90,000

About The Position

Summit 7 is seeking a mid-level Compliance Analyst to assist Summit 7 and its clients in meeting key cybersecurity compliance initiatives related to CMMC readiness and certification. This role involves working with Cybersecurity Maturity Model Certification (CMMC) documentation, preparation for certification, readiness, and assessment activities. The ideal candidate will have a strong understanding of relevant cybersecurity standards and regulations and possess excellent communication and organizational skills.

Requirements

Associate's degree in information technology, communications, or related fields with 3+ years of relevant experience, or a combination of industry certifications and experience that equates to that knowledge
Demonstrated understanding of NIST SP.800-171, NIST SP.800-171A, NIST SP.800-53, NIST SP.800-53A, FedRAMP and/or other similar federal government regulations and industry standards
CMMC Certified Professional (CCP). Highly qualified candidates who do not possess this certification may be considered - they must obtain within 6 months of hire at their own cost.
US Citizenship with the ability to pass an extensive background check
Strong written and interpersonal communication skills; experience with technical writing, procedure and policy writing preferred
Excellent organizational skills with the ability to prioritize
Proficient in Microsoft Office Online/Microsoft 365 (Word, PowerPoint, Excel, Outlook)
Creative and innovative thinking, problem-solving, and analytical skills
Possess strong customer service skills and a customer-focused mindset
Must maintain a high degree of integrity, confidentiality, and privacy
Desire to ask questions and learn quickly
Working understanding of IT and Infrastructure acronyms and definitions
All candidates MUST BE a U.S. citizen with the ability to pass an extensive background check. Proof of citizenship and eligibility to work must be provided immediately upon hire. Failure to provide required documents will be cause for termination of employment until such time that the documents are provided.

Nice To Haves

CCP certification or the ability to obtain certification within 6 months of their first day of employment.

Responsibilities

Review, develop, update, and/or maintain cybersecurity documentation, which may include policies, plans, procedures, checklists, and work instructions
Assist in development and maintenance of System Security Plans, Plans of Action and Milestones (POA&MS), security and compliance-related information system monitoring schedules, and related tasks
Participate in security assessments, including coordination, evaluation of on-premises and cloud environments, collection of evidence and artifacts, and documenting results
Work collaboratively with internal teams to maintain applied knowledge of NIST 800-171, DFARS 252.204-7012, and other associated standards and regulations related to CMMC certification
Leverage growing knowledge and expertise to identify client problem areas and collaborate to provide effective suggestions for solutions
Other duties as assigned