Analyst, Cybersecurity Policy and Compliance - Government
T-Mobile US - Bellevue, WA
posted 5 months ago
About the position
Be unstoppable with us! T-Mobile is synonymous with innovation—and you could be part of the team that disrupted an entire industry! We reinvented customer service, brought real 5G to the nation, and now we're shaping the future of technology in wireless and beyond. Our work is as exciting as it is rewarding, so consider the career opportunity below as your invitation to grow with us, make big things happen with us, above all, #BEYOU with us. Together, we won't stop! This is a hybrid role (3/2) and can be worked in Overland Park, KS, Bellevue, WA, Atlanta, GA, Frisco, TX or Reston, VA. Are you ready to make a difference in the world of Wireless Security? Then come join our team as our latest Analyst, Cybersecurity Policy and Compliance! As a member of the Cybersecurity Policy and Compliance - Government team, you have the unique opportunity to have direct and measurable impact on T-Mobile's compliance with regulatory, contractual requirements, and security policies. You will be instrumental in enabling T-Mobile's compliance to various regulations and audits such as: Cybersecurity Maturity Model Certification (CMMC), NIST 800-171 and various federal, state and local government contractual obligations. This individual will represent government compliance in support of the business and technology organizations. Translate regulatory and contractual requirements into process and system impacts and functional requirements designed to ensure operational compliance. Work to document the accreditation boundary, develop controls, conduct effectiveness testing, and support audit activities. They will identify and manage remediation activities, prepare reports, provide input to compliance strategies, propose security tools, and process changes. Build strong working relationships and partnerships within own organization and across technology and business teams; optimally communicate the status, risks, and issues associated with the compliance program. Works with multi-functional groups and staff in the creation and testing of procedures, standard or regulatory controls to ensure the security and privacy of information on T-Mobile's Network. Develops and maintains SSP and POAMs. Participate in information security review of new technologies, designs, and remediation planning efforts. Serves as liaison between Cybersecurity, IT Operations, engineering, upper management and department representatives to further the adoption of and support for compliance plans, procedures, and regulatory controls. In collaboration with our partners, evaluate complex technologies, systems, processes and controls to identify security risks and compliance gaps; work jointly with partner teams for resolution; handle escalations and resulting timelines to ensure compliance. Investigates potential compliance failures, identifying security needs and recommends plans/resolutions. Implements, tests and monitors cybersecurity compliance improvements. Supports the collection and documentation of an accurate inventory of technology, processes and people that are required to align with regulations, industry standards, and company policies. Contribute to security projects driven by groups both internal and external to info security. Also responsible for other Duties/Projects as assigned by business management as needed.
Responsibilities
- Work with multi-functional groups to create and test procedures, standards, or regulatory controls to ensure the security and privacy of information on T-Mobile's Network.
- Develop and maintain System Security Plans (SSP) and Plans of Action and Milestones (POAMs).
- Participate in information security reviews of new technologies, designs, and remediation planning efforts.
- Serve as a liaison between Cybersecurity, IT Operations, engineering, upper management, and department representatives to support compliance plans and procedures.
- Evaluate complex technologies, systems, processes, and controls to identify security risks and compliance gaps; work with partner teams for resolution.
- Investigate potential compliance failures, identifying security needs and recommending plans/resolutions.
- Implement, test, and monitor cybersecurity compliance improvements.
- Support the collection and documentation of an accurate inventory of technology, processes, and people required to align with regulations, industry standards, and company policies.
- Contribute to security projects driven by internal and external groups.
Requirements
- Bachelor's Degree in Computer Science or Information Technology, or equivalent experience.
- 2-4 years' experience in security technology or related field.
- U.S. Citizenship is required.
- Experience or knowledge of Coding/Scripting.
- Experience with IT governance, compliance, risk, and audit programs.
- Previous experience with CMMC, NIST 800-171 compliance or similar compliance activities such as SOX, PCI, etc.
- Experience supporting audits and assessments.
- Knowledge of IT or Network technology.
- Experience with one or more of the following: MS Office, SIEM, Archer, ServiceNow.
Nice-to-haves
- Communication skills
- Knowledge of ITIL and NIST frameworks (preferred)
- Licenses and certifications: CISM, CISSP, and CISA are preferred.
Benefits
- 401(k)
- AD&D insurance
- Childcare
- Dental insurance
- Disability insurance
- Employee stock purchase plan
- Family leave
- Medical, dental and vision insurance
- Flexible spending account
- Paid time off and up to paid 12 holidays
- Paid parental and family leave
- Family building benefits
- Back-up care
- Enhanced family support
- Childcare subsidy
- Tuition assistance
- College coaching
- Short and long term disability
- Voluntary AD&D coverage
- Voluntary accident coverage
- Voluntary life insurance
- Voluntary disability insurance
- Voluntary long-term care insurance
- Mobile service & home internet discounts
- Pet insurance
- Access to commuter and transit programs.
