Compliance Analyst (CMMC/NIST)

Location: Reston, VA; hybrid work environment. Proof of U.S. citizenship is required prior to hire.

Salary: $90,000–$110,000 per year

Company

Managed Network Services provider supporting U.S. Government contractors with CMMC assessment, remediation, and security governance.

What you will do

• Lead NIST 800-171a and CMMC gap assessment engagements, including evidence collection, control validation, environment reviews, and remediation planning.
• Use AI-enabled tools for evidence gathering, documentation development, and compliance validation.
• Help clients develop and maintain Network Design Documents, Software Whitelists, POAMs, SSPs, policies, and procedures.
• Coordinate remediation with Cybersecurity, Engineering, Support teams, and client stakeholders.
• Support CMMC Level 2 assessments by preparing evidence, clarifying requirements, and liaising with C3PAO auditors.

Requirements

• U.S. citizenship with proof required before hire due to access to sensitive government information.
• At least 5 years of experience in the Defense Industrial Base as a compliance analyst or in a related cybersecurity or audit role.
• Current CMMC certification: RP, CCP, or CCA.
• Strong understanding of NIST 800-171 controls, their practical implementation, and validation.
• Experience with audit, compliance, consulting, Managed Service Providers, NIST RMF, and the CMMC compliance ecosystem.
• Strong documentation, communication, presentation, organizational, and independent problem-solving skills.

Culture & Benefits

• Hybrid work environment supporting collaboration and flexibility.
• Competitive salary and comprehensive benefits package.
• Casual, friendly, and supportive workplace culture.
• Professional development support, certification growth, and advancement opportunities.