Security Governance Risk & Compliance Senior Analyst, BlackSky Global

• At least five years of experience in Governance Risk and Compliance
• Bachelor’s degree or equivalent, preferably in cybersecurity or computer science
• CISA, CISSP, CISM or equivalent security certification
• Experience or understanding of managing CMMC 2.0 Level 2 compliance requirements to include leading interactions with DIBCAC and/or C3PAO assessors and responding to requests for compliance evidence
• Experience managing SOX/ITGC and 404B compliance requirements to include leading interactions with external auditors and responding to requests for compliance evidence
• Experience developing strategic, technical, and compliance related documentation, artifacts and reports
• Exceptional verbal and written communication skills, with the ability to communicate complex compliance issues clearly to diverse audiences
• This position requires U.S. citizenship

Desirable

• This role reports to the Manager, Security Engineering and will support the global security team
• A strong candidate will assist with security program governance, security risk management, and both regulatory and customer compliance obligations
• You will ensure program adherence to applicable laws, policies, and procedures and make decisions and take action to manage identified security risks throughout their lifecycle, achieve and sustain compliance
• Manage day-to-day activities and perform reporting of regulatory and customer compliance requirements to include interfacing with internal stakeholders (e.g., Director of Security, Director of Information Technology and broader IT Team, and Vice President of Audit) and external stakeholders (e.g., customer Security POCs, external auditors, third-party assessors)
• Manage day-to-day activities of Security Risk Management and Secure Configuration Management functions (e.g., Change Authorization Board; review software and hardware inventories for deviations or risks; manage security risk exception process)
• Manage day-to-day activities of security program governance such as updating, developing, and performing annual reviews of corporate security policies, procedures, and standards
• Continuously monitor changes to compliance standards, regulations, and industry best practices, and communicate impacts to relevant stakeholders
• Other job-related duties as assigned