Senior Security, CCRI Analyst

DecisionPoint Corporation

. Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings .

Posted 10/21/2026full-timeRemote • Illinois • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in maintaining cybersecurity findings registers, tracking corrective actions, and preparing organizations for cybersecurity inspections. Proficient in developing compliance reports, managing inspection readiness, and coordinating evidence collection across various teams.

Highest-signal resume keywords

Active Secret ClearanceBachelor's Degree In CybersecurityCompTIA Security+ CertificationExperience With Command Cyber Readiness InspectionsKnowledge Of NIST SP 800-53 Controls

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity ComplianceInspection-ReadinessPOA&M ManagementRisk AnalysisEvidence CollectionTechnical WritingData ConsolidationFindings TrackingRemediation DocumentationCybersecurity Reporting

Soft Skills

Organizational SkillsAnalytical SkillsCommunication SkillsStakeholder CoordinationTechnical Writing Skills

Tools & Technologies

EMASSACASTenableEndpoint Security SolutionsSTIG ViewerSCAP ToolsServiceNow

Certifications & Qualifications

CompTIA Security+ISC2 Certified In Governance, Risk And Compliance (CGRC)CISSPCISMCASP+CySA+

Industry Keywords

FISMAIAVMDoD Cybersecurity RequirementsDISA StandardsCyber Network Defense DirectivesRisk Management Framework

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Maintain the enterprise cybersecurity findings register as the authoritative record of inspection, assessment, compliance, and remediation findings
Record finding descriptions, affected assets, risk levels, remediation owners, milestones, dependencies, deadlines, evidence, and closure status
Create, update, and monitor POA&Ms associated with CCRI findings and other cybersecurity deficiencies
Track POA&M milestones, corrective actions, due dates, progress, supporting evidence, and Government closure decisions
Review closure evidence for completeness, accuracy, traceability, and consistency with identified findings
Escalate overdue, high-risk, recurring, or inadequately addressed findings to cybersecurity and program leadership
Consolidate cybersecurity information for FISMA, IAVM, Monthly Status Report, and other Government reporting requirements
Incorporate Government-provided scan results, compliance-check results, and remediation status into CCRI readiness reports
Maintain accurate CCRI status, findings, remediation, and results reporting
Coordinate preparation for scheduled and unscheduled CCRI assessments and related cybersecurity inspections
Develop and maintain inspection-readiness schedules, evidence requests, checklists, trackers, and preparation materials
Coordinate evidence collection across infrastructure, application, operations, cybersecurity, asset-management, and Government teams
Organize inspection evidence so each artifact is current, approved, traceable, and mapped to the applicable requirement or finding
Support Government and external assessment teams during inspections by coordinating requests, gathering documentation, and tracking follow-up actions
Coordinate technical-scan and policy-compliance evidence needed to demonstrate operational resilience and adherence to applicable standards
Assist with planning, executing, documenting, and monitoring post-inspection corrective actions
Track Government comments, questions, and requests for additional evidence through resolution
Support validation of network-access and managed-services access requests with service-operations and cybersecurity personnel
Maintain approved cybersecurity standard operating procedures, policies, records, user guides, and inspection-support documentation
Monitor changes to federal, DoD, Army, DISA, and USMEPCOM cybersecurity requirements and identify needed updates
Prepare findings summaries, risk analyses, trend reports, status dashboards, and executive-level briefing materials
Identify recurring findings, systemic compliance gaps, weak corrective actions, and evidence-quality issues
Recommend process, policy, control, and documentation improvements that strengthen inspection readiness and reduce repeat findings
Maintain complete records supporting findings resolution, POA&M closure, Government reporting, and future inspection activities

Requirements

What you’ll need

Active Secret clearance or higher
Bachelor’s degree in Cybersecurity, Information Systems, or a related field
Minimum of 10 years of relevant cybersecurity, information assurance, compliance, inspection-readiness, or information-security experience
Current CompTIA Security+ certification
Current ISC2 Certified in Governance, Risk and Compliance (CGRC) certification preferred
Experience supporting Command Cyber Readiness Inspections or comparable DoD cybersecurity assessments preferred
Experience preparing organizations for scheduled and unscheduled cybersecurity inspections preferred
Experience maintaining enterprise findings registers and tracking corrective actions through validated closure preferred
Experience creating and maintaining cybersecurity POA&Ms, including milestones, remediation evidence, and closure documentation preferred
Experience consolidating FISMA, IAVM, monthly status, compliance, and executive-level cybersecurity reporting preferred
Knowledge of applicable CCRI technical requirements, cyber network defense directives, contributing factors, and DISA standards preferred
Experience coordinating inspection evidence across infrastructure, application, operations, cybersecurity, and Government teams preferred
Experience reviewing Government-provided scan results and incorporating remediation status into readiness reporting preferred
Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD cybersecurity requirements preferred
Experience maintaining cybersecurity policies, standard operating procedures, access-control records, compliance evidence, and inspection documentation preferred
Familiarity with eMASS, ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, SCAP tools, ServiceNow, or comparable governance and workflow platforms preferred
Experience developing findings metrics, remediation-aging reports, compliance dashboards, trend analyses, and leadership briefings preferred
Additional certifications such as CISSP, CISM, CASP+, CySA+, or equivalent cybersecurity credentials preferred
Familiarity with current DoD 8140 cybersecurity workforce qualification requirements preferred
Strong organizational, analytical, technical-writing, communication, and stakeholder-coordination skills
Ability to manage multiple findings, evidence requests, reporting deadlines, and corrective-action activities in a structured compliance environment

Benefits

Comp & perks

Regular full-time employment
Remote work arrangement
Opportunity to support a USMEPCOM ENLIST government cybersecurity program
Opportunity to work on cybersecurity compliance, CCRI inspection readiness, findings management, and corrective actions