Security / CCRI Analyst (Senior)

DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program. 

The Security / CCRI Analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The analyst will coordinate inspection preparation, evidence collection, assessment-team support, and corrective actions associated with scheduled and unscheduled cybersecurity inspections. 

This role will also incorporate Government-provided scan results and remediation status into CCRI readiness reporting, maintain applicable cybersecurity procedures and policy records, and support validation of network and managed-services access requests. 

This position is remote, with a preference for candidates located in the Chicago area. 

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

The Security / CCRI Analyst will: 

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings. 

• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status. 

• Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies. 

• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions. 

• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding. 

• Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership. 

• Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements. 

• Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports. 

• Maintain accurate CCRI status, findings, remediation, and results reporting. 

• Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards. 

• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections. 

• Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials. 

• Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams. 

• Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding. 

• Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions. 

• Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards. 

• Assist with planning, executing, documenting, and monitoring post-inspection corrective actions. 

• Track Government comments, questions, and requests for additional evidence through resolution. 

• Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel. 

• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation. 

• Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures. 

• Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials. 

• Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues. 

• Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings. 

• Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities. 

Required Qualifications 

• Active Secret clearance or higher. 

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field. 

• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience. 

• Current CompTIA Security+ certification. 

Preferred Qualifications 

• Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification. 

• Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments. 

• Experience preparing organizations for scheduled and unscheduled cybersecurity inspections. 

• Experience maintaining enterprise findings registers and tracking corrective actions through validated closure. 

• Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation. 

• Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting. 

• Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards. 

• Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams. 

• Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting. 

• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements. 

• Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation. 

• Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms. 

• Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings. 

• Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials. 

• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements. 

• Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills. 

• Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment. 

• EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.