Information Security, Governance, & Compliance Analyst

• Prepare and maintain documentation for information security compliance such as system security plans and plans of action and milestones (POA&M).
• Analyze policies and procedures against Federal laws and regulations and provide recommendations for closing gaps.
• Monitor and track remediation efforts for security and audit deficiencies.
• Assist in updating departmental operating procedures.
• Review Policy exception requests to evaluate risk exposure, assign appropriate remediation activities, and track remediation progress to closure.
• Conduct assessments to meet compliance mandates and collaborate with IT and business stakeholders to remediate gaps.
• Produce quality deliverables in a timely fashion.
• Prepare metrics and reports for management on the status of Compliance objectives.
• Support IT-related audits and examinations conducted by external parties.
• Evaluate and respond to customer cybersecurity/information security contracts and surveys.
• Review and maintain processes, procedures, guidelines, training, and best practices for handling and storing Controlled Unclassified Information (CUI) and other information.
• Oversee the CUI Program for the business unit and coordinate with other business units and corporate teams as needed.
• Review RFPs, RFIs, contracts, etc., for CUI and/or CMMC requirements and provide a summary of analysis and pertinent information to senior management and relevant departments.
• Assist in cybersecurity incident response and communication activities.

• Bachelor's degree in Information Technology or Science, Computer Science, Cybersecurity or another related field. Five years of relevant experience will be accepted in place of a bachelor's degree.
• Minimum five years of experience in governance and compliance management or administration.
• Must be legally authorized to work in the U.S.; Visa sponsorship will not be offered.
• Proven experience operating security tools.
• Working understanding or demonstrated experience with ITAR and Federal Cybersecurity Compliance programs, such as FedRAMP, NIST 800-53, NIST 800-171, and CMMC 2.0 Level 2.
• Basic proficiency in networking technologies, network security, and network monitoring solutions.
• Ability to translate technical solutions into compliance and governance standards.
• Intermediate understanding of cybersecurity technology and controls.
• Knowledge of and experience with Security Information and Event Management platforms.
• Knowledge of security protocols and principles.
• Critical thinking skills and ability to solve complex problems.
• Excellent diagnostic, problem resolution, and proactive monitoring skills.
• Knowledge of risk management processes.

• CISA, CISSP, CRISC, GSEC, GISP, STRAT, GSNA, Security+, or other related certificates.
• Audit related experience.
• Experience in secure system architecture and design (cloud, on-prem, application).

Who We Are:

Join a team that designs computers, displays, and electronic systems for aircraft of the future! At Astronautics Corporation of America (Astronautics), you will be part of a creative group of professionals who work on the cutting-edge of technology. We offer competitive pay, excellent benefits and the opportunity for professional growth in a friendly environment.

Astronautics, headquartered in Oak Creek, Wisconsin, is a global leader in the design, development and manufacture of secure avionics equipment and systems for the commercial and military aerospace industry. Key product areas include electronic primary flight and engine displays, connected aircraft and cyber solutions, electronic flight bags, and certified servers for airborne applications. Services include avionics system integration and custom software for critical applications. Since its founding in 1959, Astronautics has been providing trusted, reliable, and tailored solutions to help customers achieve mission success. Astronautics is the parent company of Kearfott Corporation, headquartered in Pine Brook, New Jersey.

We are proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status.