Security / CCRI Analyst (Senior)

DecisionPoint | Cortek•Chicago, IL

18d•Remote

About The Position

DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program. The analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The role coordinates inspection preparation, evidence collection, assessment-team support, and corrective actions for scheduled and unscheduled cybersecurity inspections. It also incorporates Government-provided scan results and remediation status into CCRI readiness reporting, maintains applicable cybersecurity procedures and policy records, and supports validation of network and managed-services access requests. This position is remote, with a preference for candidates located in the Chicago area. By applying, candidates acknowledge and consent to having their resume included in an active competitive government contract bid.

Requirements

Active Secret clearance or higher.
Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.
Current CompTIA Security+ certification.

Nice To Haves

Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification.
Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments.
Experience preparing organizations for scheduled and unscheduled cybersecurity inspections.
Experience maintaining enterprise findings registers and tracking corrective actions through validated closure.
Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation.
Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting.
Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams.
Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting.
Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements.
Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation.
Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms.
Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings.
Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials.
Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills.
Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment.

Responsibilities

Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.
Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies.
Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.
Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.
Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.
Maintain accurate CCRI status, findings, remediation, and results reporting.
Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.
Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.
Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.
Organize inspection evidence so each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.
Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.
Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.
Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.
Track Government comments, questions, and requests for additional evidence through resolution.
Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.
Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.
Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.
Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.
Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.
Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.
Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.