IT Compliance Analyst

$65,000 - $90,000/Yr

Summit 7 Systems - Huntsville, AL

posted 4 months ago

Full-time - Mid Level
Huntsville, AL
Professional, Scientific, and Technical Services

About the position

Summit 7 Systems is seeking a mid-level IT Compliance Analyst who is well-versed in the Cybersecurity Maturity Model Certification (CMMC) documentation and the associated processes for certification, readiness, and assessment activities. This role is crucial in assisting both Summit 7 and its clients in achieving key cybersecurity compliance initiatives related to CMMC. The ideal candidate will have a strong understanding of cybersecurity compliance frameworks and will be responsible for reviewing, developing, updating, and maintaining various cybersecurity documentation, including policies, plans, procedures, checklists, and work instructions. In this position, the IT Compliance Analyst will also participate in the development and maintenance of System Security Plans, Plans of Action and Milestones (POA&Ms), and security monitoring schedules. The role involves conducting security assessments, which includes coordinating evaluations of both on-premises and cloud environments, collecting evidence and artifacts, and documenting the results of these assessments. Collaboration with internal teams is essential to maintain a comprehensive understanding of NIST 800-171, DFARS 252.204-7012, and other standards related to CMMC certification. The candidate will leverage their growing knowledge to identify client problem areas and work collaboratively to provide effective solutions. This position requires U.S. citizenship and the ability to pass an in-depth background check. The successful candidate will be expected to obtain a CMMC Certified Professional (CCP) certification within six months of employment if they do not already possess it. Summit 7 Systems values its employees and offers a supportive work environment that recognizes the importance of work-life balance, providing meaningful health and welfare benefits, including excellent health and dental coverage, a 401(k) plan with company matching, and generous vacation and sick leave policies.

Responsibilities

  • Assist in meeting key cybersecurity compliance initiatives associated with CMMC readiness and certification.
  • Review, develop, update, and maintain cybersecurity documentation including policies, plans, procedures, checklists, and work instructions.
  • Participate in the development and maintenance of System Security Plans and Plans of Action and Milestones (POA&Ms).
  • Conduct security assessments, including coordination, evaluation of on-premises and cloud environments, collection of evidence and artifacts, and documenting results.
  • Collaborate with internal teams to maintain knowledge of NIST 800-171, DFARS 252.204-7012, and other standards related to CMMC certification.
  • Identify client problem areas and collaborate to provide effective solutions.

Requirements

  • Associate's degree in information technology, communications, or related fields with 3+ years of relevant experience, or a combination of industry certifications and experience that equates to that knowledge.
  • Demonstrated understanding of NIST SP.800-171, NIST SP.800-171A, NIST SP.800-53, NIST SP.800-53A, FedRAMP and/or other similar federal government regulations and industry standards.
  • CMMC Certified Professional (CCP) or the ability to obtain certification within 6 months of hire at their own cost.
  • Strong written and interpersonal communication skills; experience with technical writing, procedure and policy writing preferred.
  • Excellent organizational skills with the ability to prioritize tasks effectively.
  • Proficient in Microsoft Office Online/Microsoft 365 (Word, PowerPoint, Excel, Outlook).
  • Creative and innovative thinking, problem-solving, and analytical skills.
  • Strong customer service skills and a customer-focused mindset.
  • High degree of integrity, confidentiality, and privacy.

Nice-to-haves

  • Experience with technical writing and policy writing.
  • Knowledge of IT and Infrastructure acronyms and definitions.

Benefits

  • Health insurance
  • Dental insurance
  • 401(k) matching
  • Unlimited mobile phone plan
  • 10 days' vacation
  • 7 days sick time
  • Bonuses and salary increase potential via certifications plan
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service