CMMC Compliance Analyst

Job Summary

To support a growing CMMC practice, the full-time Compliance Analyst will assist with CMMC Level 1 and Level 2 engagements, focusing on compliance documentation and client communication in a remote-friendly environment.

Key responsibilities

• Support CMMC Level 1 and Level 2 engagements from gap assessment through certification readiness
• Draft and maintain System Security Plans (SSPs), Plans of Action and Milestones (POAMs), and other compliance documentation
• Communicate directly with clients regarding documentation requests, milestones, and remediation tasks

Required qualifications

• At least 2 years of experience in cybersecurity, IT, compliance/GRC, audit, or a related field
• Working familiarity with NIST SP 800-171 and CMMC 2.0, or the ability to learn quickly
• Highly organized with the ability to manage documentation and deadlines across multiple clients
• Comfortable explaining technical requirements in plain language
• Exposure to Microsoft 365 GCC High, Azure Government, or similar regulated cloud environments is a plus