Analyst, Cybersecurity Policy and Compliance - Government

T-Mobile US - Bellevue, WA

Full-time - Mid Level

Hybrid - Bellevue, WA

Telecommunications

About the position

The Analyst, Cybersecurity Policy and Compliance - Government role at T-Mobile involves ensuring compliance with various regulatory and contractual requirements related to cybersecurity. This position plays a critical role in supporting T-Mobile's compliance with standards such as the Cybersecurity Maturity Model Certification (CMMC) and NIST 800-171, among others. The analyst will work closely with multi-functional teams to develop and implement security controls, conduct audits, and manage remediation activities, thereby directly impacting the company's cybersecurity posture.

Responsibilities

• Work with multi-functional groups to create and test procedures and regulatory controls for information security.
• Develop and maintain System Security Plans (SSP) and Plans of Action and Milestones (POAMs).
• Participate in information security reviews of new technologies and remediation planning efforts.
• Serve as a liaison between Cybersecurity, IT Operations, engineering, and upper management to support compliance plans and procedures.
• Evaluate complex technologies and processes to identify security risks and compliance gaps, working with partner teams for resolution.
• Investigate potential compliance failures and recommend plans for resolution.
• Support the documentation of an accurate inventory of technology, processes, and personnel required for compliance.
• Contribute to security projects driven by internal and external groups.

Requirements

• Bachelor's Degree in Computer Science or Information Technology.
• Experience or knowledge of coding/scripting.
• Experience with IT governance, compliance, risk, and audit programs.
• Previous experience with CMMC, NIST 800-171 compliance, or similar compliance activities such as SOX or PCI.
• Experience supporting audits and assessments.
• Knowledge of IT or Network technology.
• Experience with tools such as MS Office, SIEM, Archer, or ServiceNow.

Nice-to-haves

• Experience with cybersecurity compliance improvements.
• Knowledge of regulatory requirements and industry standards.

Benefits

• Competitive base salary and compensation package.
• Annual stock grant and employee stock purchase plan.
• 401(k) retirement savings plan.
• Access to free, year-round money coaches.