Назад
Company hidden
обновлено 6 дней назад

Compliance Analyst (CMMC/NIST)

90 000 - 110 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Compliance Analyst (CMMC/NIST): Leading NIST 800-171a and CMMC gap assessments, evidence validation, remediation planning, and audit preparation for U.S. Government contractors with an accent on CMMC Level 2 assessments, compliant documentation, and AI-enabled compliance workflows. Focus on validating control implementation, coordinating remediation with cybersecurity and engineering teams, and supporting C3PAO auditors through evidence submission and clarification.

Location: Hybrid in Reston, Virginia, United States; proof of U.S. citizenship is required before hire.

Salary: $90,000–$110,000 per year

Company

hirify.global is a Managed Network Services provider supporting U.S. Government contractors with CMMC assessment, remediation, and ongoing security governance.

What you will do

  • Lead NIST 800-171a and CMMC gap assessment engagements, including evidence collection, control validation, environment reviews, and remediation planning.
  • Use AI-enabled tools for evidence gathering, documentation development, and compliance validation.
  • Help clients develop and maintain Network Design Documents, Software Whitelists, POAMs, SSPs, policies, and procedures.
  • Coordinate remediation with Cybersecurity, Engineering, Support, client stakeholders, and internal analysts, including implementation and testing.
  • Serve as the primary liaison with C3PAO auditors during CMMC Level 2 assessments, supporting preparation, evidence submission, and clarifications.

Requirements

  • Proof of U.S. citizenship is required before hire due to federal regulations governing access to sensitive government information.
  • At least 5 years of experience within the Defense Industrial Base as a compliance analyst or in a closely related cybersecurity or audit function.
  • Strong technical understanding of NIST 800-171 controls, including how controls are implemented and validated in practice.
  • Current CMMC certification is required: RP, CCP, or CCA.
  • Previous experience in audit, compliance, or consulting, plus experience working for or directly supporting a Managed Service Provider.
  • Familiarity with the NIST Risk Management Framework and the CMMC compliance ecosystem, including assessment methodologies and audit expectations.
  • Detail-oriented, process-driven, well-organized, and able to produce accurate, audit-ready compliance documentation.
  • Strong professional verbal and written communication skills, with the ability to present to clients, senior leaders, and internal teams.
  • Self-starter with a proactive mindset and the ability to identify support needs or process improvements independently.

Culture & Benefits

  • Hybrid work environment with flexibility and collaboration.
  • Competitive salary and comprehensive benefits package.
  • Casual, friendly, and supportive workplace culture.
  • Professional development support, certification growth, and advancement opportunities.
  • Equal employment opportunity and affirmative action workplace.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →