Description
The Information Protection Advisor will partner with business, technology, cybersecurity, and control teams to maintain accurate, audit-ready security documentation and support compliance initiatives aligned with federal standards.
Responsibilities:
- Develop, update, and maintain assigned federal System Security Plans (SSPs) and related compliance documentation.
- Partner with system owners, control owners, engineering teams, and subject matter experts to validate control implementations, system boundaries, and security documentation.
- Track documentation updates, open items, remediation activities, and evidence requirements.
- Gather, organize, and maintain control evidence and supporting artifacts.
- Support compliance assessments, audits, and certification activities.
- Identify documentation gaps, inconsistencies, and potential compliance concerns.
- Maintain compliance artifacts, including POA&Ms, policies, procedures, control mappings, assessment records, and remediation documentation.
- Support CMMC readiness efforts through control mapping, evidence collection, gap assessments, issue tracking, and remediation follow-up.
- Assist with defining and maintaining compliance scope, system boundaries, inventories, and asset populations.
- Contribute to templates, procedures, and quality reviews that improve consistency and documentation standards.
- Communicate project status, risks, and priorities while managing multiple deliverables and deadlines.
Required Qualifications:
- 4+ years of relevant experience in information security, IT risk, compliance, audit, cybersecurity, or a related field with a bachelor's degree.
- Working knowledge of risk management, compliance, audit, and security control documentation practices.
- Experience interpreting NIST requirements and translating them into actionable documentation and compliance activities.
- Strong organizational skills with the ability to manage multiple priorities and deadlines.
- Demonstrated attention to detail and commitment to documentation accuracy and quality.
- Excellent written and verbal communication skills.
- Ability to collaborate effectively with technical teams, business partners, and control owners.
- Self-motivated, action-oriented, and capable of working independently while exercising sound judgment.
Preferred Qualifications:
- Experience creating, maintaining, or supporting federal System Security Plans (SSPs).
- Experience with Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, NIST SP 800-53, or Department of Defense (DoD) security requirements.
- Experience managing POA&Ms, control narratives, evidence mappings, system inventories, diagrams, policies, or procedures.
- Knowledge of additional security and compliance frameworks.
- Experience supporting regulatory assessments, audits, or certification activities.
- Professional certifications such as CISSP, CISM, CISA, CCP, or CCA.
Benefits:
- Comprehensive range of benefits, including medical, vision, dental, and well-being and behavioral health programs.
- 401(k), company-paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence.