CMMC Compliance Analyst — Risk & Governance Expert

Alvarez Technology Group; Salinas (CA); On-site; USD 41,000 - 55,000; Full time

Job summary

Alvarez Technology Group (ATG) is seeking a Compliance Analyst to deliver client-facing cybersecurity compliance, risk management, and governance services. This position will work directly with customers to assess risk, evaluate compliance, develop policies and operating procedures, organize evidence, document findings, and coordinate remediation activities through completion.

The ideal candidate combines strong client communication and project-management skills with practical cybersecurity

Qualifications

• Experience in cybersecurity governance, risk management, compliance, IT audit, security assessment, or related discipline.
• Experience conducting cybersecurity risk assessments or compliance assessments.
• Experience reviewing controls and evidence against defined requirements.
• Experience developing cybersecurity policies, standards, operating procedures, and control documentation.
• Working knowledge of NIST SP 800-171, CMMC, NIST CSF, CIS Controls, GLBA, FFIEC guidance, or comparable frameworks.
• Experience documenting findings, risks, exceptions, remediation activities, and control status within a GRC process or platform.
• Strong client-facing communication, facilitation, presentation, and technical writing skills.
• Ability to conduct structured interviews with technical and nontechnical stakeholders.
• Ability to coordinate multiple customer projects, assessments, deliverables, and deadlines.
• Strong organization, follow-through, professional judgment, and attention to evidence quality.
• Working knowledge of identity and access management, endpoint security, vulnerability management, logging and SIEM, network security, cloud security, Microsoft 365, and data protection.

Responsibilities

• Deliver client-facing cybersecurity compliance, risk management, and governance services.
• Interview stakeholders, review evidence, identify control gaps, and document risk.
• Translate complex requirements into clear, actionable recommendations.
• Maintain internal processes, templates, GRC data, evidence standards, and workflows.

Skills

Cybersecurity governance

Risk management

Compliance

IT audit

Security assessment

GRC processes

Policy development

Stakeholder interviewing

Project management

Documentation skills

Identity management

Education

Bachelor's degree preferred

CISA

CRISC

CISM

CISSP

CCSP

CompTIA Security+

CMMC / Cyber-AB credentials

Microsoft Security certifications

Tools

Microsoft 365

Entra ID

Intune

Defender

Sentinel

Purview

Azure

Job description

Alvarez Technology Group (ATG) is seeking a Compliance Analyst to deliver client-facing cybersecurity compliance, risk management, and governance services. This position will work directly with customers to assess risk, evaluate compliance, develop policies and operating procedures, organize evidence, document findings, and coordinate remediation activities through completion.

The ideal candidate combines strong client communication and project-management skills with practical cybersecurity