Security / CCRI Analyst (Senior)

DecisionPoint | Cortek; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

DecisionPoint | Cortek is seeking a Senior Security / CCRI Analyst to manage cybersecurity compliance, findings, and corrective actions for USMEPCOM ENLIST. The role maintains the findings register, POA&M milestones, and reporting for FISMA and related government requirements, including pre/post-inspection coordination and evidence collection.

The position is remote with a preference for candidates in the Chicago area, requiring active security clearance, a cybersecurity degree, and extensive

Qualifications

• Active Secret clearance required or higher.
• Bachelor's degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.
• Current CompTIA Security+ certification.

Responsibilities

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.
• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
• Create, update, and monitor POA&M associated with CCRI findings and other cybersecurity deficiencies.
• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.

Skills

Active Secret clearance

Education

Bachelor's degree in Cybersecurity, Information Systems, or a related field

Job description

Overview

DecisionPoint seeks a Senior Security / Command Cyber Readiness Inspection (CCRI) Analyst to support cybersecurity compliance, findings management, inspection readiness, and corrective-action tracking for the USMEPCOM ENLIST program.

The Security / CCRI Analyst will maintain the enterprise cybersecurity findings register, track POA&M milestones and closure evidence, and consolidate FISMA, IAVM, and monthly status reporting. The analyst will coordinate inspection preparation, evidence collection, assessment-team support, and corrective actions associated with scheduled and unscheduled cybersecurity inspections.

This role will also incorporate Government-provided scan results and remediation status into CCRI readiness reporting, maintain applicable cybersecurity procedures and policy records, and support validation of network and managed-services access requests.

This position is remote, with a preference for candidates located in the Chicago area.

Duties & Responsibilities

The Security / CCRI Analyst will:

• Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings.
• Record and maintain finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status.
• Create, update, and monitor POA&M associated with CCRI findings and other cybersecurity deficiencies.
• Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions.
• Review closure evidence for completeness, accuracy, traceability, and consistency with the identified finding.
• Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership.
• Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements.
• Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports.
• Maintain accurate CCRI status, findings, remediation, and results reporting.
• Support compliance with applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards.
• Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections.
• Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials.
• Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams.
• Organize inspection evidence so that each artifact is current, approved, traceable, and mapped to the applicable requirement or finding.
• Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions.
• Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards.
• Assist with planning, executing, documenting, and monitoring post-inspection corrective actions.
• Track Government comments, questions, and requests for additional evidence through resolution.
• Support validation of network-access and managed-services access requests in coordination with service-operations and cybersecurity personnel.
• Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation.
• Monitor changes to applicable federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates to inspection materials or procedures.
• Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials.
• Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues.
• Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings.
• Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities.

Qualifications

Required Qualifications

• Active Secret clearance or higher.
• Bachelor's degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience.
• Current CompTIA Security+ certification.

Preferred Qualifications

• Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification.
• Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments.
• Experience preparing organizations for scheduled and unscheduled cybersecurity inspections.
• Experience mainta