CMMC Compliance & GRC Analyst

DigiFlight, Inc.; Columbia (MD); Hybrid; USD 90,000 - 130,000; Full time

Job summary

DigiFlight, Inc. is seeking a cybersecurity governance, risk, and compliance professional to support the organization’s compliance program and DoD contract requirements.

Responsibilities include helping maintain security standards, leading or supporting CMMC readiness assessments, and assisting with evidence collection and control implementation discussions across internal and external stakeholders.

Qualifications

• Experience in governance, risk, and compliance (GRC) programs.
• Knowledge of CMMC, NIST SP 800-171, SP 800-53, ISO/IEC 27001:2022.
• Experience supporting third-party audits and readiness assessments.

Responsibilities

• Support the Director of Cybersecurity Compliance in reviewing, maintaining, and implementing security standards and policies.
• Lead or participate in CMMC readiness activities, gap assessments, and audits.
• Assist with evidence collection, interviews, and control implementation clarification.

Skills

GRC expertise

Executive communication

Stakeholder management

Documentation

Attention to detail

Office software

Education

Bachelor's degree in IT or related field

Cyber AB RP or CMMC CCP/CCA certification

Tools

Microsoft Word

Excel

PowerPoint

SharePoint

Job description

DigiFlight, Inc. is seeking a cybersecurity governance, risk, and compliance professional to support the organization’s compliance program and DoD contract requirements.

Responsibilities include helping maintain security standards, leading or supporting CMMC readiness assessments, and assisting with evidence collection and control implementation discussions across internal and external stakeholders.