Cybersecurity Compliance Specialist - Intermediate

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Cybersecurity Compliance Specialist - Intermediate to join our team in Indianapolis (REMOTE), Indiana (US-IN), United States (US).

NTT DATA Services Federal Government is seeking a highly capable Cybersecurity Compliance Specialist to join our team that will support the North American segment of the Rolls-Royce network. As a global leader in IT services, we deliver innovative solutions to drive mission-critical operations for our clients.

The Cybersecurity Compliance Specialist is:

• Responsible for ensuring the NOC meets Cybersecurity Maturity Model Certification (CMMC) requirements, aligning network and security operations with Department of Defense (DoD) standards for protecting Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
• This role conducts gap assessments, develops and maintains the System Security Plan (SSP) and Plan of Action and Milestones (POA&M), and coordinates third-party Certified Third-Party Assessor Organization (C3PAO) audits to achieve and sustain CMMC Level 2 certification, with readiness for Level 3 as needed.
• Working remotely, the Specialist collaborates with the NOC Director to integrate compliance into operational strategy, partners with Security/OT Analysts to implement controls (e.g., access control, audit logging), and ensures network configurations (managed by Network Engineers) meet NIST 800-171 and CMMC standards.
• They maintain compliance documentation, train staff on CMMC basics (in coordination with Rolls-Royce-provided training resources), and monitor ongoing adherence, safeguarding Rolls-Royce’s defense contracts and intellectual property.

Key Responsibilities: 

• Designs and implements technical solutions for protecting the confidentiality, integrity and availability of sensitive information.
• Provides technical evaluations of client systems and assists with making security improvements.
• Provides technical support in the areas of vulnerability assessment, risk assessment, network security and security implementation.
• Conducts testing and audit log reviews to evaluate the effectiveness of current security measures.
• Conducts security product evaluations, and recommends products, technologies and upgrades to improve the client’s security posture.
• Ensure CMMC Level 2 Compliance: Conduct gap assessments and align network and security operations with CMMC Level 2 and NIST 800-171 requirements to protect Controlled Unclassified Information (CUI) and Federal Contract Information (FCI), ensuring readiness for Level 3 as needed.
• Develop and maintain compliance documentation: Create and update the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) to document compliance efforts and address deficiencies, maintaining accurate records for audits and ongoing adherence.
• Coordinate C3PAO audits: Collaborate with third-party Certified Third-Party Assessor Organizations (C3PAOs) to facilitate audits, ensuring successful achievement and sustainment of CMMC Level 2 certification for Rolls-Royce’s defense contracts.
• Integration compliance into operational strategy: Work remotely with the NOC Director to embed CMMC and DoD compliance requirements into the NCO’s operational strategy, aligning security practices with organizational objectives.
• Implement security controls: Partner with Security and OT analysts to implement and enforce controls, such as access control and audit logging, ensuring network configurations managed by Network Engineers meet CMMMC and NIST 800-171 standards.
• Monitor ongoing compliance: Continuously assess and monitor network and security operations to ensure sustained adherence to CMMC Level 2 requirements, safeguarding Rolls-Royce’s intellectual property and contract obligations.
• Training staff on CMMC requirements: Coordinate with Rolls-Royce-provided training resources to educate NOC staff on CMMC basics, fostering awareness and adherence to compliance processes and best practices.
• Protect sensitive information: Oversee compliance measures to safeguard Controlled Unclassified Information and Federal Contract Information, ensuring the security of critical assets and maintaining eligibility for defense contracts.

Basic Qualifications:

• US Citizenship required.