CMMC BSA

Required Related Work Experience and Number of Years : Business Systems or IT related experience - 8

Job description:

This role focuses on defining systems scope and objectives through a strong understanding of CMMC Level 2 Control requirements, relevant business processes, and technology platforms.

The analyst partners with Compliance and Information Security experts to translate requirements into actionable technology objectives, ensuring procedures and evidence meet control standards.

Responsibilities include collaborating with architects on Enclave Strategy, facilitating discovery and documentation of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) flows, coordinating gap analysis and remediation planning for technology platforms, and overseeing implementation and validation of compliance objectives. The position also bridges communication between business and technology teams to align requirements and outcomes.

JOB SUMMARY:

This position is responsible for formulation and definition of systems scope and objectives by combining an understanding of CMMC Level 2 Control requirements and applicable business processes and technology platforms. Support the organization in achieving CMMC Level 2 compliance by providing critical input and requirements to guide technology teams design and implementation.

MAJOR DUTIES AND RESPONSIBILITIES:

• Develop an understanding and translate Compliance requirements into Technology requirements for IT, Engineering and Security teams.
• Coordinate with Compliance experts and Information Security teams to combine multiple perspectives into a comprehensive set of requirements. Collaborate to develop procedures and evidence requirements to meet control objectives.
• Partner with architects to understand the Enclave Strategy and Boundary to create capability and functional requirements.
• Develop an understanding of the Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) definition and facilitate discovery and documentation of data flow related to FCI and CUI.
• Facilitate evaluation of technology platforms with respect to the requirements to drive gap analysis and remediation planning.
• Analyze business partners’ operations to understand FCI and CUI usage to determine opportunities to modify processes, functions, and systems to achieve compliance objectives.
• Oversee implementation, coordinating tests and observing initiation of the system to validate achievement of business objectives.
• Facilitate communication between business and technology teams to develop a common understanding of requirements and expected outcomes.

REQUIRED QUALIFICATIONS:

Required Skills/Abilities and Knowledge

1. Ability to read, write, speak and understand English
2. Ability to prioritize and organize effectively
3. Ability to work independently, as well as in a collaborative and dynamic team environment
4. Ability to handle multiple projects and priorities
5. Ability to analyze and interpret data
6. Ability to quickly identify business problems/opportunities
7. Ability to communicate orally and in writing in a clear and straightforward manner
8. Ability to communicate with all levels of management and company personnel
9. Ability to manage multiple projects at one time
10. Ability to prioritize and organize effectively
11. Knowledge of software applications such as Word, Excel, etc.
12. Knowledge of CMMC Level 2 Controls and Control Objectives

Required Education : Bachelor’s degree or equivalent experience

PREFERRED QUALIFICATIONS:

Preferred Related Work Experience and Number of Years

Proven ability to lead business systems analysis and requirements activities for enterprise-scale, multi-workstream technology programs and dependency management across complex environments.

Prior experience in a similar role for CMMC L2 readiness/certification or NIST SP 800-171 implementation in an enterprise environment.