Sr. Cybersecurity Assurance Analyst

Join our dynamic team at the forefront of safeguarding critical assets within the Defense Industrial Base (DIB). As a Senior Cybersecurity Assurance Analyst, you will play a pivotal role in evaluating and enhancing the cybersecurity posture of our organization. This position demands a strong understanding of DIB compliance requirements and hands-on experience in conducting thorough gap assessments. You will be instrumental in ensuring our adherence to key frameworks, including DFARS 252.204-7012, CMMC 2.0, and NIST SP 800-171. Your expertise will be crucial in guiding system owners toward audit readiness and providing essential support during C3PAO CMMC audits. This is an excellent opportunity to make a significant impact on the security and integrity of our operations.

The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems. Its end-to-end Command, Control, Computers, Communications and Intelligence, Surveillance & Reconnaissance (C4ISR) capabilities encompass design, integration, test, certification, ground/flight training and complete logistics support. IAS tailors solutions to customer cost, performance, and schedule requirements and designs to consistently exceed expectations – with an unrivaled record of on time and on (or under) budget deliveries.

Responsibilities:

• Conduct internal audits and assessments against DFARS 252.204-7012, CMMC 2.0, and NIST SP 800-171 controls and requirements.
• Evaluate the design, implementation, and effectiveness of internal security controls, ensuring they align with regulatory requirements and organizational security standards.
• Provide expert guidance and support to system owners on preparing for audits, including remediation strategies and best practices for compliance.
• Act as a key point of contact and provide direct support during C3PAO CMMC audits, facilitating the audit process and ensuring successful outcomes.
• Develop, document, and maintain cybersecurity policies, procedures, and standards to support ongoing compliance efforts.
• Analyze complex cybersecurity requirements from DFARS, CMMC, NIST, and other relevant standards, and translate them into actionable implementation plans.
• Collaborate closely with cross-functional teams, including IT, engineering, and program management, to address cybersecurity challenges and implement effective security solutions.
• Prepare detailed and accurate reports on assessment findings, compliance status, and remediation progress for management review.
• Stay abreast of the evolving cybersecurity landscape, including emerging threats, technologies, and regulatory changes, and provide recommendations for proactive security measures.

Qualifications You Must Have:

• Bachelor's degree in a related discipline or 10 or more years of relevant experience.
• A higher level degree may substitute for experience.
• Related experience may be considered in lieu of required education.
•  Demonstrated understanding and practical experience with FISMA, CIS 20, NIST SP 800-171, DFARS Clause 252.204-7012, or similar requirements.
• Proven experience in conducting gap assessments and security control evaluations.
• Strong understanding of cybersecurity principles, practices, and technologies.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong communication and interpersonal skills, with the ability to effectively interact with technical and non-technical stakeholders.
• Proficiency with MSOffice Applications.
• Proficiency with data sampling and attribute analysis.
• Proficiency with process flow documentation.
• Ability to obtain and maintain a U.S. Security Clearance.

Qualifications We Prefer:

• Prior experience working within the Defense Industrial Base (DIB).
• Familiarity with security tools such as GRC platforms, vulnerability scanners, and SIEM.
• Familiarity with Information Technology, Audit, Cybersecurity, or Project Management as demonstrated with work toward any of the following or similar certifications:
• IT: ITIL, CompTIA A+, Network+, Azure Fundamentals, M365 Fundamentals,
• Audit: Certified Internal Auditor, Certified Information System Auditor,
• Cybersecurity: Certified Information Security Manager, Security+,
• Project Management:  CAPM, PMP, Project+
• Familiarity with risk management frameworks (e.g., NIST RMF).
• Experience developing or managing SSPs and POA&Ms.
• Ability to read and interpret security and technical documentation.
• Proven track record of maintaining the confid