GRC Analyst III - Certification and Compliance Programs - Andover, MA

Apply

Job Summary:

The GRC Analyst III is responsible for supporting the cybersecurity direction of the business and advancing the company's cybersecurity posture.

The ideal candidate is a CMMC expert experienced in managing certification and compliance programs. The role assists the Director with managing the cybersecurity policy framework, overseeing the security awareness and training program, and managing customer assurance activities.

Job Responsibilities:

• Manage the cybersecurity certification and compliance programs, such as CMMC, ISO, Cyber Essentials Plus, and NIST CSF. This including coordination of evidence collection, advising on control requirements, and managing external auditors.
• Manages the Security Awareness and Training Program, including content selection, training assignment and completion monitoring, cybersecurity awareness campaigns, CISO newsletters, and the Phishing program.
• Management of the cybersecurity policy framework ensuring the documentation is reviewed and updated to meet regulatory and contractual requirements.
• Provide regular reporting on Governance and Compliance programs and support leadership with risk prioritization and/or escalations.
• Monitor current and proposed cybersecurity changes impacting regulatory and Cybersecurity industry best practice guidance.
• Assist the Director in developing metrics to assess the success of the Cybersecurity program and provide regular reports to cybersecurity leadership.
• Work in tandem with cybersecurity, leadership to perform ongoing Cybersecurity program assessments.
• Liaison with auditors, both internal and external, to maintain and implement controls.

Required Qualifications:

• Typically requires a minimum of 5+ years of experience in cybersecurity as a practitioner with exposure to security frameworks.
• Typically requires Bachelor's degree in information security or related field.
• Experience with cybersecurity technology skills for well-rounded proficiency, as well as proven ability to align with security practices and compliance responsibilities.
• Experience and understanding of various cybersecurity frameworks, regulatory requirements and laws (ex., ISO, NIST, etc.).
• Experience with cloud environments such Amazon Web Services (AWS).
• Demonstrated problem-solving capabilities, and ability to manage complex local and international Cybersecurity requirements.

Preferred Qualifications:

• Masters Degree.
• Aerospace & Defense Industry.
• Cyber Security Certifications such as: CISSP, CRISC, CISA.

"This position requires you to have or obtain a government security clearance. Security clearances may only be granted to U.S. citizens."

Job Details Fulltime Equivalent Job Grade Range for this Position:

* $87,100.00 - $182,900.00 annual salary for in-office or hybrid employees in FL, GA, IN, AZ, AL, MD or TX, and all remote employees * $97,600.00 - $204,800.00 annual salary for in-office or hybrid employees in VA, CA, NH or MA * $102,800.00 - $215,800.00 annual salary for in-office or hybrid employees in NJ

Mercury Systems is a technology company that makes the world a safer, more secure place. We push processing power to the tactical edge, making the latest commercial technologies profoundly more accessible for today's most challenging aerospace and defense missions. From silicon to system scale, Mercury enables customers to accelerate innovation and turn data into decision superiority. Headquartered in Andover, Massachusetts, Mercury employs more than 2,300 people in 24 locations worldwide. To learn more, visit mrcy.com

Our Culture

We are committed to making Mercury a great place to work, no matter where our employees are located. We offer a casual and enjoyable atmosphere that allows employees to learn and grow. We help and care for one another and work as one to achieve results for us and for our customers. We value communication and transparency, and strive to foster two-way dialogue at all levels of the organization. We are committed to lifelong learning, offering comprehensive skills training and tuition reimbursement. Whether you're just starting out on your career journey or you are an experienced professional, it's important to us that you feel recognized and rewarded for your contributions.

To find out more about Why Mercury?, or visit the Mercury Community or find answers to general questions at Mercury FAQs

Mercury Systems is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex (including pregnancy), sexual orientation, gender identity, national origin, genetic information, creed, citizenship, disability, protected veteran or marital status.

As an equal opportunity employer, Mercury Systems is committed to a diverse workforce. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veterans' Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants that require accommodation in the job application process may contact the number below for assistance.

(978) 256-1300

Click here read about our recent press release.