IT GRC Analyst II — CMMC Level 2 & NIST Compliance

Complete Turbine Services; Florida; On-site; USD 70,000 - 110,000; Full time

Job summary

Complete Turbine Services in Florida seeks an IT GRC Analyst (CMMC Control Specialist) responsible for daily monitoring, operational testing, and ongoing compliance analysis of cybersecurity controls across hybrid IT environments, cloud enclaves, and infrastructure to ensure ongoing satisfaction of CMMC Level 2 and NIST SP 800-171 requirements through standardized, repeatable processes.

This hands-on role focuses on executing controls, reviewing logs, authoring SOPs, maintaining evidence, and

Qualifications

• 2–4+ years hands-on IT compliance monitoring and audits in DoD/DFARS.

Responsibilities

• Draft, review and refine SOPs translating NIST 800-171 controls into technical workflows.
• Audit operational practices and update documentation as environments change.
• Track POA&M progress and verify remediation with IT Ops.
• Support SPRS scores and prepare audit/gap analyses.

Skills

IT compliance

SOP development

Documentation

Auditing

Risk reporting

Education

Cybersecurity degree

Tools

Active Directory

Entra ID

Microsoft 365

GCC High

SIEM

Firewalls

Hypervisors

Job description

Complete Turbine Services in Florida seeks an IT GRC Analyst (CMMC Control Specialist) responsible for daily monitoring, operational testing, and ongoing compliance analysis of cybersecurity controls across hybrid IT environments, cloud enclaves, and infrastructure to ensure ongoing satisfaction of CMMC Level 2 and NIST SP 800-171 requirements through standardized, repeatable processes.

This hands-on role focuses on executing controls, reviewing logs, authoring SOPs, maintaining evidence, and