Cybersecurity Compliance Specialist

This position will require access to ITAR and/or EAR controlled technical data, technology or source code, and requires that all individuals in this role be authorized to access such information

The Cybersecurity & Compliance Specialist is a salaried position reporting to the Information Technology & Systems Manager. The Cybersecurity & Compliance Specialist is responsible for the Cybersecurity posture, compliance, readiness, training and ongoing governance of information systems subject to Cybersecurity Maturity Model Certification (CMMC) and Controlled Unclassified Information (CUI). The Cybersecurity & Compliance Specialist will lead cross-functional working groups and coordinate with External Service Providers (ESP) as required.

This position requires strong organizational skills, analytical skills, a high level of attention to detail and knowledge of current requirements for compliance. Good communications skills are required with the ability to work with all levels of the organization diplomatically and skillfully.

• Provide governance and CMMC Program Management to ensure compliance to legal and regulatory requirements including dictated customer requirements
• Maintain and update REDAR’s System Security Policy, Plan of Action & Milestones (POA&Ms), Risk assessments and related security policies
• Cyber Security/Disaster Recovery/Incident Response and Business Continuity Planning
• Cyber Security, Controlled Unclassified Information (CUI), Risk Awareness and IT policy training
• Ensure continuous monitoring, logging, vulnerability scanning and system hardening

• Bachelor's degree in computer sciences, Information Systems or a specialized cybersecurity program, which will provide foundational knowledge in network security, risk management, cryptography, and threat detection
• Minimum three years’ experience in the following areas
• Monitoring and remediating Cyber Security threats
• Implementation and retention of corporate policies
• Training employees on Cyber Security policies and awareness
• Windows server administration
• Microsoft Office 365 & Exchange administration
• Previous employment with a Department of Defense Contractor preferred
• Previous experience with CMMC and NIST 800-171 compliance preferred

• Provide governance and CMMC Program Management to ensure compliance to legal and regulatory requirements including dictated customer requirements
• Collaborate with Information Technology & Systems Manager to manage Information System Security for CUI systems
• Cybersecurity Maturity Model Certification (CMMC) and NIST 800-171 Compliance & Governance
• Develop and execute a strategic roadmap to achieve and maintain CMMC Level 2 Compliance
• Coordinate readiness assessments, gap analysis and remediation planning
• Oversee implementation and maintenance of NIST SP 800-171 controls
• Implementation, and retention of IT policies, processes and systems required to satisfy CMMC (including NIST 800-171) compliance
• Collaborate with business units to develop and implement processes & procedures to support regulatory and customer dictated security requirements
• Provide evidence/supporting documents to attest to individual requirements of CMMC and NIST 800-171
• Enter data required in Procurement Integrated Enterprise Environment (PIEE) for CMMC, Supplier Performance Risk System (SPRS), etc.
• Coordinate with Registered Practitioner Organization (RPO) and Certified Third-Party Assessor Organization (C3
  
  PAO) to attain/retain CMMC certification.
• Primary liaison with Customers, Senior Leaders, Managers, Contracts/Exports Department and other internal employees as required regarding CMMC compliance and status
• Collaboration with Supply Chain
• Monitoring of CMMC related FAR/DFAR clauses
• Develop and execute process to Audit departments and users for compliance
• Current awareness of changing and upcoming security and compliance requirements

• Maintain and update REDAR’s System Security Policy (SSP), Plan of Action & Milestones (POA&Ms), Risk assessments and related security policies
• Review and update System Security Plan (SSP) to reflect current…