Salary
💰 $119,000 - $199,000 per year
Tech Stack
CloudCyber SecuritySwift
About the role
- Maxar Intelligence is a provider of secure, precise, geospatial intelligence.
- We deliver disruptive value to government and commercial customers to help them monitor, understand, and navigate our changing planet.
- Our unique approach combines decades of deep mission understanding and a proven commercial and defense foundation to deploy solutions and deliver insights with unrivaled speed, scale, and cost effectiveness.
- The Senior Cybersecurity Compliance Analyst will join a well-rounded, creative, and inspired Cybersecurity Risk and Compliance team (part of the office of the CISO) to support a variety of exciting business initiatives that span both the commercial and US Government businesses.
- At Maxar we take space exploration, humanitarian efforts and protecting the planet seriously.
- In this role, you will be part of a team leading and providing direction on cybersecurity best practices as they relate to NIST/CMMC compliance and will be acting as an advocate for Cybersecurity policies and standards to directly contribute to Maxar’s amazing mission.
- This position will be located in our Westminster, CO office, our Herndon, VA office and or can be done remotely two days per week.
- What You’ll Be Doing: Work collaboratively with business owners to maintain NIST 800-171/CMMC compliance by performing risk and control maturity assessments; targeting information systems that process, store, and transmit company and customer information.
- Provide cybersecurity risk consultation to internal teams focused on the alignment of information system design and implementation to the underlying cybersecurity control requirements.
- Assist with answering client security questionnaires and evaluating compliance with regulatory and contractual requirements.
- Provide more robustness to our existing Third-Party Risk Management (TPRM) program and be hands-on in planning and executing TPRM engagements.
- Participate in the creation and maintenance of Cybersecurity documents (policies, standards, guidelines, and procedures).
- Contribute to the Cybersecurity education program.
- Minimum Requirements: Must be a U.S. Citizen.
- Requires a minimum of 8 years of progressive Cybersecurity and Compliance experience.
- In depth knowledge of Cybersecurity, regulatory governance, and IT security practices.
- Experience documenting and maintaining Cybersecurity guidelines, policies, and standards.
- Experience performing Security Risk Assessments based on common control frameworks: e.g.: NIST SP 800-171/171a, NIST SP 800-53/53a, ISO27001 and SOC2.
- Strong verbal and written communication skills, with demonstrated ability to effectively present material to a variety of technical and non-technical audiences.
- Experience leveraging GRC tools to automate third-party risk reviews; including risk register integration and workflows to track ownership , progress and closure .
Requirements
- Must be a U.S. Citizen.
- Requires a minimum of 8 years of progressive Cybersecurity and Compliance experience.
- In depth knowledge of Cybersecurity, regulatory governance, and IT security practices.
- Experience documenting and maintaining Cybersecurity guidelines, policies, and standards.
- Experience performing Security Risk Assessments based on common control frameworks: e.g.: NIST SP 800-171/171a, NIST SP 800-53/53a, ISO27001 and SOC2.
- Strong verbal and written communication skills, with demonstrated ability to effectively present material to a variety of technical and non-technical audiences.
- Experience leveraging GRC tools to automate third-party risk reviews; including risk register integration and workflows to track ownership , progress and closure .