Senior Cybersecurity Compliance Analyst

Maxar Intelligence is a provider of secure, precise, geospatial intelligence. We deliver disruptive value to government and commercial customers to help them monitor, understand, and navigate our changing planet. Our unique approach combines decades of deep mission understanding and a proven commercial and defense foundation to deploy solutions and deliver insights with unrivaled speed, scale, and cost effectiveness.

The Senior Cybersecurity Compliance Analyst will join a well-rounded, creative, and inspired Cybersecurity Risk and Compliance team (part of the office of the CISO) to support a variety of exciting business initiatives that span both the commercial and US Government businesses. At Maxar we take space exploration, humanitarian efforts and protecting the planet seriously. In this role, you will be part of a team leading and providing direction on cybersecurity best practices as they relate to NIST/CMMC compliance and will be acting as an advocate for Cybersecurity policies and standards to directly contribute to Maxar's amazing mission.

This position will be located in our Westminster, CO office, our Herndon, VA office and or can be done remotely.

What You'll Be Doing:

• Work collaboratively with business owners to maintain NIST 800-171/CMMC compliance by performing risk and control maturity assessments; targeting information systems that process, store, and transmit company and customer information.
• Provide cybersecurity risk consultation to internal teams focused on the alignment of information system design and implementation to the underlying cybersecurity control requirements.
• Assist with answering client security questionnaires and evaluating compliance with regulatory and contractual requirements.
• Provide more robustness to our existing TPRM (Third-Party Risk Management) program and be hands-on in planning and executing TPRM engagements.
• Participate in the creation and maintenance of Cybersecurity documents (policies, standards, guidelines, and procedures).
• Contribute to the Cybersecurity education program.
  

Minimum Requirements:

• Must be a U.S. Citizen.
• Requires a minimum of 8 years of progressive Cybersecurity and Compliance experience.
• In depth knowledge of Cybersecurity, regulatory governance, and IT security practices.
• Experience documenting and maintaining Cybersecurity guidelines, policies, and standards.
• Experience performing Security Risk Assessments based on common control frameworks: e.g.: NIST SP 800-171/171a, NIST SP 800-53/53a, ISO27001 and SOC2.
• Strong verbal and written communication skills, with demonstrated ability to effectively present material to a variety of technical and non-technical audiences.
• Experience leveraging GRC tools to automate third-party risk reviews; including risk register integration and workflows to track ownership, progress and closure.

Preferred Qualification:

• Bachelor's degree or four relevant years of experience may be substituted for a degree.
• Strong ability to think strategically about business, products, and technical challenges.
• Experience analyzing business or technical problems and proposing and implementing solutions.
• Knowledge of networks, operating systems, applications, and cloud services.
• Familiarity with security frameworks and various compliance requirements; including: ISO27001, SOC2, NIST, CMMC. Knowledge of OWASP/SAMM
• Experience with third-party risk and M&A Cybersecurity assessments
• Certification related to Cybersecurity (e.g., CISSP, CISA, CISM)

What's In It For You:

There is a reason we boast awards like Best Employer, Best Place to work, Top employer, candidate experience winner. Our strength is in our people. Each team member makes a unique contribution to our collective mission.

• Health, Vision, Dental Insurance, and Employee Assistance Program
• 401K, with matching and immediate vesting
• Health Savings Account (HSA)/Flexible Spending Accounts (FSA) Options
• PTO, 10 Holidays, and Sick Time
• Maternity and Paternity Leave
• Adoption Reimbursement
• Flexible Hours, Hybrid work options
• Tuition Reimbursement and Student Loan Repayment
• Pet Insurance
• And More!

#LI-MG1

#LI-KC1

For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.

We offer a comprehensive package of benefits including paid time off, health and welfare insurance, and 401(k) to eligible employees. You can find more information on our benefits at: https://www.maxar.com/careers/benefits

The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire.

The date of posting can be found on Maxar's Career page at the top of each job posting.

To apply, submit your application via Maxar's Career page.

Maxar Technologies values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.