Security​/CCRI Analyst; Senior

Job Location s: US-IL-Chicago

Category:
Information Technology

Type:
Regular Full-Time

DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program.

The Security / CCRI Analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The analyst will coordinate inspection preparation, evidence collection, assessment-team support, and corrective actions associated with scheduled and unscheduled cybersecurity inspections.

This role will also incorporate Government-provided scan results and remediation status into CCRI readiness reporting, maintain applicable cybersecurity procedures and policy records, and support validation of network and managed-services access requests.

This position is remote, with a preference for candidates located in the Chicago area.

Note:

By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

The Security / CCRI Analyst will:

• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
• Create, update, and monitor POA&M associated with CCRI findings and other cybersecurity deficiencies.
• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
• Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.
• Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.
• Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.
• Maintain accurate CCRI status, findings, remediation, and results reporting.
• Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.
• Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.
• Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.
• Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.
• Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.
• Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.
• Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.
• Track Government comments, questions, and requests for additional evidence through resolution.
• Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.
• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.
• Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.
• Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.
• Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.
• Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.
• Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.

Required Qualifications

• Active Secret clearance or higher.
• Bachelor's degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or…