Cybersecurity Compliance Management Analyst, Senior

Overview Cybersecurity Compliance Management Analyst, Senior Remote Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! Chenega Advanced Solutions and Intelligence Services, LLC (CASIS), is a wholly-owned subsidiary of the Chenega Corporation, an Alaska Native Corporation (ANC) headquartered in Anchorage, Alaska. CASIS is an 8(a), ANC-Owned, Small Disadvantaged Business (SDB) headquartered in Sierra Vista, AZ. We are a professional services provider specializing in the delivery of Intelligence Operations and Cyber Support Services to the Department of Defense (DoD) & other agencies within the U.S. Government (USG). CASIS is a part of Chenega Corporation’s Military, Intelligence, and Operations Support (MIOS) Strategic Business Unit (SBU). The SBU operates as a leveraged services model that increases the depth & scalability of our support staff while reducing costs to our customers. Chenega MIOS has over 1,700 employees located across the United States & internationally, with experience that includes management of contracts valued at $2 Billion that provide services to large federal agencies. The Cybersecurity Compliance Management Analyst Senior will support the Capability Program Executive Enterprise Software and Services (CPE ES2) headquarters by delivering cybersecurity compliance management guidance, analysis, and operational services grounded in Army and Department of War (DoW) / Department of Defense (DoD) cybersecurity directives, including DoD 8500series, DoD Instruction (DoDI) 8510.01 (Risk Management Framework (RMF)), Army Chief Information Officer (CIO)/G6 Zero Trust guidance, DoW / DoD Cybersecurity Strategy, and all applicable cloud and software modernization policies and standards (e.g., National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37, NIST SP 800-53). In addition, Team Chenega team members have served as Information System Security Managers (ISSMs) and Information System Security Officers (ISSOs) across business and weapon systems, having experienced the gamut of cybersecurity activities across a program’s life cycle. Responsibilities Develop, implement, and maintain cybersecurity compliance programs, policies, and procedures. Ensure compliance with applicable federal, DoD, and industry cybersecurity requirements, including NIST, RMF, CMMC, FedRAMP, FISMA, and organizational security policies, as applicable. Conduct cybersecurity compliance assessments, security control reviews, and internal audits. Monitor compliance with security controls and recommend corrective actions for identified deficiencies. Support Risk Management Framework (RMF) activities, including system categorization, security control implementation, assessment, authorization, and continuous monitoring. Review System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other cybersecurity documentation. Coordinate cybersecurity audits, inspections, and assessments with internal and external stakeholders. Track and report compliance metrics, audit findings, remediation efforts, and program performance. Perform cybersecurity risk assessments and evaluate the effectiveness of implemented security controls. Collaborate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), system owners, and technical teams to resolve compliance issues. Ensure vulnerabilities identified through assessments and security scans are documented and tracked through remediation. Maintain cybersecurity governance documentation, policies, standards, and operating procedures. Provide cybersecurity compliance guidance and awareness training to organizational personnel. Support Authority to Operate (ATO), Authorization to Test (ATT), and continuous authorization activities. Stay current on evolving cybersecurity threats, regulations, frameworks, and compliance requirements. Assist leadership in developing cybersecurity strategies and compliance improvement initiatives. Prepare executive-level reports, risk briefings, and compliance status updates. Support incident response activities by ensuring compliance with reporting and documentation requirements. Perform additional cybersecurity governance and compliance duties as assigned. Other duties as assigned. Qualifications Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Systems Engineering, or a related field (or equivalent experience). 10+ years of relevant experience Experience in cybersecurity compliance, governance, risk management, or information assurance. Background check with the ability to obtain and maintain a Secret Security Clearance. Preferred Qualifications: Experience analyzing Assured Compliance Assessment Solution (ACAS) Experience using the Security Technical Implementation Guide (STIG) and other compliance data to identify non-compliant cybersecurity findings. Experience using Microsoft Azure, Jira, DevOps, and ServiceNow Experience supporting Department of Defense, federal agencies, or defense contractors. Hands-on experience with RMF, eMASS, ACAS, SCAP, or vulnerability management platforms. Familiarity with cloud security compliance (AWS, Azure, or Google Cloud). Experience supporting Authority to Operate (ATO) packages. Knowledge of Zero Trust Architecture and Continuous Monitoring programs. Knowledge, Skills and Abilities: Knowledge of cybersecurity frameworks such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, NIST SP 800-171, RMF, FISMA, FedRAMP, and CMMC. Familiarity with vulnerability management tools, security assessments, and audit processes. Strong analytical, organizational, and problem-solving skills. Excellent written and verbal communication skills. Cybersecurity Governance, Risk & Compliance (GRC) Risk Management Framework (RMF) NIST 800-53 / 800-171 Compliance FISMA, CMMC & FedRAMP Compliance Security Control Assessments Continuous Monitoring Vulnerability Management Audit & Inspection Readiness Policy Development Risk Assessment & Mitigation Security Documentation Data Analysis & Reporting Stakeholder Communication Problem Solving & Critical Thinking How you’ll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS’s culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega’s impact on the world. Chenega MIOS News- https://chenegamios.com/news/ Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - www.chenegamios.com Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm LinkedIn - https://www.linkedin.com/company/1472684/ Facebook - https://www.facebook.com/chenegamios/ Teleworking Permitted? Yes Teleworking Details Remote Estimated Salary/Wage USD $144,800.00/Yr. Up to USD $165,000.00/Yr.