Lead CMMC 2.0 Compliance & Security Analyst

LogicalisUS; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

Logicalis is seeking a Compliance & Security Analyst to serve as the lead point of contact for the Overwatch Continuous Compliance program, managing a portfolio of about 10 clients and guiding them toward audit readiness.

You will translate Federal mandates into a practical technical roadmap for client leadership and IT teams, develop security policies, and oversee IR/DR tabletop drills while maintaining knowledge of applicable laws and Logicalis policies.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• Mastery of CMMC 2.0 (Level 2) and NIST SP 800-171.
• Experience advising on CUI segmentation to limit audit scope and cost.
• Strong technical writing to produce audit-ready SSPs, SOPs, and policies.

Responsibilities

• Architect and author System Security Plans (SSPs) detailing control implementation.
• Develop and manage Plan of Action and Milestones (POAM) and remediation tracking.
• Draft formal security policies reflecting real-world operations, not just templates.
• Design and facilitate annual Incident Response and Disaster Recovery tabletop drills.
• Lead Evidence Collection to verify logs and configurations meet audit standards.
• Maintain knowledge of applicable laws/regulations and Logicalis policies; promote corporate values.

Skills

CMMC 2.0 Level 2

NIST SP 800-171

Education

Bachelor’s degree in a related field

CCP (CMMC Certified Professional)

CISA

Security+

Tools

Apptega

FutureFeed

Microsoft Purview

Job description

Logicalis is seeking a Compliance & Security Analyst to serve as the lead point of contact for the Overwatch Continuous Compliance program, managing a portfolio of about 10 clients and guiding them toward audit readiness.

You will translate Federal mandates into a practical technical roadmap for client leadership and IT teams, develop security policies, and oversee IR/DR tabletop drills while maintaining knowledge of applicable laws and Logicalis policies.