Security / CCRI Analyst (Senior)

About this role

Overview
DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program.
The Security / CCRI Analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The analyst will coordinate inspection preparation, evidence collection, assessment-team support, and corrective actions associated with scheduled and unscheduled cybersecurity inspections.
This role will also incorporate Government-provided scan results and remediation status into CCRI readiness reporting, maintain applicable cybersecurity procedures and policy records, and support validation of network and managed-services access requests.
This position is remote, with a preference for candidates located in the Chicago area.
Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.
Duties & Responsibilities
The Security / CCRI Analyst will:

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.

• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.

• Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies.

• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.

• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.

• Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.

• Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.

• Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.

• Maintain accurate CCRI status, findings, remediation, and results reporting.

• Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.

• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.

• Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.

• Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.

• Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.

• Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.

• Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.

• Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.

• Track Government comments, questions, and requests for additional evidence through resolution.

• Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.

• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.

• Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.

• Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.

• Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.

• Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.

• Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.
Qualifications
Required Qualifications

• Active Secret clearance or higher.

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.

• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.

• Current CompTIA Security+ certification.
Preferred Qualifications

• Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification.

• Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments.

• Experience preparing organizations for scheduled and unscheduled cybersecurity inspections.

• Experience maintaining enterprise findings registers and tracking corrective actions through validated closure.

• Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation.

• Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting.

• Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.

• Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams.

• Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting.

• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements.

• Experience maintaining cybersecurity…