# Information Protection Advisor

**Company**: The Cigna Group
**Location**: Bloomington, MN, MN
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: 103,100 - 171,900 USD / yearly
**Category**: Security
**Industry**: Healthcare

**Apply**: https://cigna.wd5.myworkdayjobs.com/en-US/cignacareers/job/Bloomington-MN/Information-Protection-Advisor---SSP---CMMC-Programs_26011776?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_eae77236-c0f

## Description

The Information Protection Advisor will partner with business, technology, cybersecurity, and control teams to maintain accurate, audit-ready security documentation and support compliance initiatives aligned with federal standards.

Responsibilities:

- Develop, update, and maintain assigned federal System Security Plans (SSPs) and related compliance documentation.

- Partner with system owners, control owners, engineering teams, and subject matter experts to validate control implementations, system boundaries, and security documentation.

- Track documentation updates, open items, remediation activities, and evidence requirements.

- Gather, organize, and maintain control evidence and supporting artifacts.

- Support compliance assessments, audits, and certification activities.

- Identify documentation gaps, inconsistencies, and potential compliance concerns.

- Maintain compliance artifacts, including POA&Ms, policies, procedures, control mappings, assessment records, and remediation documentation.

- Support CMMC readiness efforts through control mapping, evidence collection, gap assessments, issue tracking, and remediation follow-up.

- Assist with defining and maintaining compliance scope, system boundaries, inventories, and asset populations.

- Contribute to templates, procedures, and quality reviews that improve consistency and documentation standards.

- Communicate project status, risks, and priorities while managing multiple deliverables and deadlines.

Required Qualifications:

- 4+ years of relevant experience in information security, IT risk, compliance, audit, cybersecurity, or a related field with a bachelor's degree.

- Working knowledge of risk management, compliance, audit, and security control documentation practices.

- Experience interpreting NIST requirements and translating them into actionable documentation and compliance activities.

- Strong organizational skills with the ability to manage multiple priorities and deadlines.

- Demonstrated attention to detail and commitment to documentation accuracy and quality.

- Excellent written and verbal communication skills.

- Ability to collaborate effectively with technical teams, business partners, and control owners.

- Self-motivated, action-oriented, and capable of working independently while exercising sound judgment.

Preferred Qualifications:

- Experience creating, maintaining, or supporting federal System Security Plans (SSPs).

- Experience with Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, NIST SP 800-53, or Department of Defense (DoD) security requirements.

- Experience managing POA&Ms, control narratives, evidence mappings, system inventories, diagrams, policies, or procedures.

- Knowledge of additional security and compliance frameworks.

- Experience supporting regulatory assessments, audits, or certification activities.

- Professional certifications such as CISSP, CISM, CISA, CCP, or CCA.

Benefits:

- Comprehensive range of benefits, including medical, vision, dental, and well-being and behavioral health programs.

- 401(k), company-paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence.

## Skills

### Required
- information security
- IT risk
- compliance
- audit
- cybersecurity
- risk management
- NIST requirements

### Nice to have
- Cybersecurity Maturity Model Certification (CMMC)
- NIST SP 800-171
- NIST SP 800-53
- Department of Defense (DoD) security requirements
- CISSP
- CISM
- CISA
- CCP
- CCA

---

Source: [Apply at cigna.wd5.myworkdayjobs.com](https://cigna.wd5.myworkdayjobs.com/en-US/cignacareers/job/Bloomington-MN/Information-Protection-Advisor---SSP---CMMC-Programs_26011776?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)