Federal Information Protection & Compliance Advisor

Cigna; Bloomfield (CT); À distance; USD 103 000 - 172 000; Plein temps

Résumé du poste

The Cigna Group seeks an Information Protection Advisor to support federal compliance programs and ensure systems meet evolving cybersecurity standards. You’ll partner with business, technology, and control teams to maintain accurate, audit-ready security documentation, supporting CMMC and NIST alignment.

This role focuses on documenting controls, evidence collection, and remediation tracking, driving consistent processes across teams, and preparing for audits and certifications.

Qualifications

• 4+ years of relevant experience in information security, IT risk, compliance, audit, cybersecurity, or a related field with a bachelor's degree; or 8+ years of relevant experience in lieu of a degree.
• Experience interpreting NIST requirements and translating them into actionable documentation and compliance activities.

Responsabilités

• Partner with system owners, control owners, engineering teams, and subject matter experts to validate control implementations, system boundaries, and security documentation.
• Track documentation updates, open items, remediation activities, and evidence requirements through completion.
• Gather, organize, and maintain control evidence and supporting artifacts in approved repositories.
• Support compliance assessments, audits, and certification activities by coordinating documentation, responding to requests, and monitoring deliverables.
• Identify documentation gaps, inconsistencies, and potential compliance concerns, escalating issues when appropriate.

Connaissances

Information security

IT risk

Compliance

Documentation

Collaboration

Communication

Formation

Bachelor's degree

Description du poste

The Cigna Group seeks an Information Protection Advisor to support federal compliance programs and ensure systems meet evolving cybersecurity standards. You’ll partner with business, technology, and control teams to maintain accurate, audit-ready security documentation, supporting CMMC and NIST alignment.

This role focuses on documenting controls, evidence collection, and remediation tracking, driving consistent processes across teams, and preparing for audits and certifications.