Senior Cybersecurity Compliance Analyst

Please review the job details below.
Maxar Intelligence is a provider of secure, precise, geospatial intelligence. We deliver disruptive value to government and commercial customers to help them monitor, understand, and navigate our changing planet. Our unique approach combines decades of deep mission understanding and a proven commercial and defense foundation to deploy solutions and deliver insights with unrivaled speed, scale, and cost effectiveness.
The Senior Cybersecurity Compliance Analyst will join a well-rounded, creative, and inspired Cybersecurity Risk and Compliance team (part of the office of the CISO) to support a variety of exciting business initiatives that span both the commercial and US Government businesses. At Maxar we take space exploration, humanitarian efforts and protecting the planet seriously. In this role, you will be part of a team leading and providing direction on cybersecurity best practices as they relate to NIST/CMMC compliance and will be acting as an advocate for Cybersecurity policies and standards to directly contribute to Maxar's amazing mission.
This position will be located in our Westminster, CO office, our Herndon, VA office and or can be done remotely two days per week.
What You'll Be Doing:

• Work collaboratively with business owners to maintain NIST 800-171/CMMC compliance by p erforming risk and control maturity assessments ; targeting information systems that process, store, and transmit company and customer information.
• Provide cybersecurity risk consultation to internal teams focused on the alignment of information system design and implementation to the underlying cybersecurity control requirements.
• Assist with answering client security questionnaires and evaluating compliance with regulatory and contractual requirements.
• Provide more robustness to our existing TPR M (Third-Party Risk Management ) program and be hands-on in planning and executing TPR M engagements.
• Participate in the creation and maintenance of Cybersecurity documents (policies, standards, guidelines, and procedures).
• Contribute to the Cybersecurity education program.

Minimum Requirements:

• Must be a U.S. Citizen.
• Requires a minimum of 8 years of progressive Cybersecurity and Compliance experience.
• In depth knowledge of Cybersecurity, regulatory governance, and IT security practices.
• Experience documenting and maintaining Cybersecurity guidelines, policies, and standards.
• Experience performing Security Risk Assessments based on common control frameworks: e.g.: NIST SP 800-171/171a, NIST SP 800-53/53a, ISO27001 and SOC2.
• Strong verbal and written communication skills, with demonstrated ability to effectively present material to a variety of technical and non-technical audiences.
• Experience leveraging GRC tools to automate third-party risk reviews; including risk register integration and workflows to track ownership , progress and closure .

Preferred Qualification:

• Bachelor's degree or f our relevant years of experience may be substituted for a degree.
• Strong ability to think strategically about business, products, and technical challenges.
• Experience analyzing business or technical problems and proposing and implementing solutions.
• Knowledge of networks, operating systems, applications, and cloud services.
• Familiarity with security frameworks and various compliance requirements; including: ISO27001, SOC2, NIST, CMMC. Knowledge of OWASP/SAMM
• Experience with third-party risk and M&A Cybersecurity assessments
• Certification related to Cybersecurity (e.g., CISSP, CISA, CISM)

What's In It For You:
There is a reason we boast awards like Best Employer, Best Place to work, Top employer, candidate experience winner. Our strength is in our people. Each team member makes a unique contribution to our collective mission.

• Health, Vision, Dental Insurance, and Employee Assistance Program
• 401K, with matching and immediate vesting
• Health Savings Account (HSA)/Flexible Spending Accounts (FSA) Options
• PTO, 10 Holidays, and Sick Time
• Maternity and Paternity Leave
• Adoption Reimbursement
• Flexible Hours, Hybrid work options
• Tuition Reimbursement and Student Loan Repayment
• Pet Insurance
• And More!

#LI-MG1
In support of pay transparency at Maxar, we disclose salary ranges on all U.S. job postings. The successful candidate's starting pay will fall within the salary range provided below and is determined based on job-related factors, including, but not limited to, the experience, qualifications, knowledge, skills, geographic work location, and market conditions. Candidates with the minimum necessary experience, qualifications, knowledge, and skillsets for the position should not expect to receive the upper end of the pay range.
• The base pay for this position within Colorado is: $119,000.00 - $199,000.00 annually.
• The base pay for this position within the Washington, DC metropolitan area is: $131,000.00 - $219,000.00 annually.
For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.
We offer a comprehensive package of benefits including paid time off, health and welfare insurance, and 401(k) to eligible employees. You can find more information on our benefits at: https://www.maxar.com/careers/benefits
Additionally, this position is incentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributions.
The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire.
The date of posting can be found on Maxar's Career page at the top of each job posting.
To apply, submit your application via Maxar's Career page.
Maxar Technologies values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.