Remote Federal SSP & CMMC Compliance Advisor

The Cigna Group; BLOOMINGTON (MN); Hybrid; USD 103,000 - 172,000; Full time

Benefits offered by this job

Annual bonus plan

Medical, vision, dental benefits

401(k)

Paid time off & holidays

Job summary

The Cigna Group is seeking an Information Protection Advisor to support federal compliance programs, ensuring systems meet evolving cybersecurity and regulatory requirements. You will partner with business, technology, cybersecurity, and control teams to maintain accurate, audit-ready security documentation and support compliance initiatives aligned with federal standards, including CMMC and NIST.

This role focuses on managing SSPs, evidence collection, and remediation activities, while driving

Qualifications

• 4+ years of relevant experience in information security, IT risk, compliance, audit, cybersecurity, or a related field with a bachelor's degree; or 8+ years of relevant experience in lieu of a degree.
• Knowledge of risk management, compliance, audit, and security control documentation practices.
• Experience interpreting NIST requirements and translating them into actionable documentation and compliance activities.
• Strong organizational skills to manage multiple priorities and deadlines.
• Attention to detail and commitment to documentation accuracy and quality.
• Excellent written and verbal communication skills.
• Ability to collaborate effectively with technical teams, business partners, and control owners.
• Self-motivated, action-oriented, and capable of working independently while exercising sound judgment.

Responsibilities

• Develop, update, & maintain assigned federal SSPs and related compliance documentation to ensure accuracy, completeness, and audit readiness.
• Partner with system owners, control owners, engineering teams, and subject matter experts to validate control implementations, system boundaries, and security documentation.
• Track documentation updates, open items, remediation activities, and evidence requirements through completion.
• Gather, organize, and maintain control evidence and supporting artifacts in approved repositories.
• Support compliance assessments, audits, and certification activities by coordinating documentation, responding to requests, and monitoring deliverables.
• Identify documentation gaps, inconsistencies, and potential compliance concerns, escalating issues when appropriate.
• Maintain compliance artifacts including POA&Ms, policies, procedures, control mappings, assessment records, and remediation documentation.
• Support CMMC readiness efforts through control mapping, evidence collection, gap assessments, issue tracking, and remediation follow-up.
• Assist with defining and maintaining compliance scope, system boundaries, inventories, and asset populations supporting federal operations.
• Contribute to templates, procedures, and quality reviews that improve consistency, efficiency, and documentation standards across the compliance program.
• Communicate project status, risks, and priorities while managing multiple deliverables and deadlines.
• Support additional security, regulatory, contractual, and audit-related initiatives as business needs evolve.

Skills

Information security

Audit & compliance

NIST requirements

Documentation practices

Written communication

Interpersonal collaboration

Independent work

Education

Bachelor's degree in a related field

Job description

The Cigna Group is seeking an Information Protection Advisor to support federal compliance programs, ensuring systems meet evolving cybersecurity and regulatory requirements. You will partner with business, technology, cybersecurity, and control teams to maintain accurate, audit-ready security documentation and support compliance initiatives aligned with federal standards, including CMMC and NIST.

This role focuses on managing SSPs, evidence collection, and remediation activities, while driving