Traci Steo - CMMC Business Systems Analyst

Job Description

Apex is looking for a Program Manager for a long term contract, onsite 4 days a week in the St.Louis area. Please apply or email [email protected] directly.

Job#: 3024056

The Business Systems Analyst – CMMC is responsible for defining system scope and objectives by combining a strong understanding of CMMC Level 2 control requirements with applicable business processes and technology platforms. This role supports the organization’s efforts to achieve and maintain CMMC Level 2 compliance by translating compliance requirements into actionable technology and process requirements that guide solution design and implementation across IT, Engineering, and Security teams.

• Translate CMMC Level 2 compliance requirements into clear, actionable technology and business requirements for IT, Engineering, and Information Security teams.
• Coordinate with Compliance and Information Security subject‑matter experts to consolidate regulatory, technical, and operational perspectives into a comprehensive set of requirements.
• Collaborate with stakeholders to develop procedures, artifacts, and evidence requirements necessary to satisfy CMMC control objectives.
• Partner with architecture teams to understand enclave strategies and system boundaries, and to develop functional and capability‑based requirements.
• Develop and maintain an understanding of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) definitions.
• Facilitate discovery, documentation, and validation of FCI and CUI data flows across business processes, systems, and platforms.
• Evaluate existing and proposed technology platforms against compliance requirements to support gap analysis and remediation planning.
• Analyze business operations and workflows involving FCI and CUI to identify opportunities for process, system, or control improvements.
• Oversee and support implementation activities, including coordinating testing and validating that solutions meet defined compliance and business objectives.
• Act as a liaison between business and technology teams to ensure a shared understanding of requirements, risks, dependencies, and expected outcomes.

• Strong verbal and written communication skills in English
• Ability to analyze, interpret, and document complex technical and business requirements
• Demonstrated ability to prioritize and manage multiple projects and competing deadlines
• Ability to work independently and collaboratively in a dynamic, cross‑functional environment
• Strong problem‑solving and analytical skills
• Ability to communicate effectively with stakeholders at all organizational levels
• Proficiency with common business and productivity tools (e.g., Word, Excel)
• Working knowledge of CMMC Level 2 controls and control objectives

• Bachelor’s degree or equivalent combination of education and experience

• Minimum of 8 years of experience in business systems analysis, IT, or a related discipline

• Proven experience leading enterprise‑scale business systems analysis and requirements activities across multiple work streams with complex dependencies.
• Prior experience supporting CMMC Level 2 readiness or certification efforts, or implementing NIST SP 800‑171 controls in an enterprise environment.

Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a Support Linc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts.

In terms of professional development, Apex hosts an on‑demand training program, provides access to certification prep and a library of technical and…