CMMC Compliance Analyst

Job Summary

Supporting CMMC compliance efforts, the full-time Compliance Analyst will assist in engagements from gap assessments to certification readiness while working remotely and collaborating with senior consultants.

Key responsibilities

• Support CMMC Level 1 and Level 2 engagements, including gap assessments and certification readiness
• Draft and maintain compliance documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POAMs)
• Communicate with clients regarding documentation requests and track engagement progress to ensure audit readiness

Required qualifications

• At least 2 years of experience in cybersecurity, IT, compliance/GRC, audit, or a related field
• Familiarity with NIST SP 800-171 and CMMC 2.0, or the ability to learn quickly
• Strong organizational skills to manage documentation and deadlines across multiple clients
• Comfortable explaining technical requirements in plain language to clients
• Exposure to Microsoft 365 GCC High or similar regulated cloud environments is a plus