Remote CMMC Compliance Analyst — Grow in GRC

Sentinel Blue; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Fully paid healthcare

Vision and dental insurance for the员工

Certification and trainingOpportuniti

Paid vacation

Paid holidays

401k with company match

Focus on work-life balance

Job summary

Sentinel Blue is seeking a CMMC Compliance Analyst to join our Operations team. This full-time, fully remote role focuses on helping clients meet CMMC and NIST requirements through documentation review and control validation.

You will learn from senior staff, develop artifacts, and contribute to SSPs, POA&M updates, and evidence repositories while growing into a lead compliance professional.

Qualifications

• U.S. citizenship and eligibility for Secret clearance.
• 2–5 years in information security, IT compliance, cybersecurity auditing, GRC, or similar.
• Ability to lead/compliance-related decisions and interpret control intent.
• Experience reviewing/developing SSPs, POA&Ms, risk assessments, or similar compliance documentation.

Responsibilities

• Review documentation and assess environments against CMMC/NIST objectives.
• Analyze compliance requests and coordinate with stakeholders.
• Maintain System Security Plans (SSPs), POA&Ms, policy sets, procedures, and control documentation.
• Review configurations (access controls, logging, encryption, segmentation, backups).
• Communicate with clients via email, meetings, and interviews to gather evidence.
• Contribute to templates and evidence repositories for audit readiness.
• Support creation of compliance reports and executive presentations.

Skills

Information security

IT compliance

Cybersecurity auditing

GRC

Policy interpretation

Communication skills

Independent work

Time management

Education

Bachelor’s or Master’s degree in Cybersecurity, Information Systems, Computer Science, or related field

Tools

IAM

Logging/Monitoring

Job description

Sentinel Blue is seeking a CMMC Compliance Analyst to join our Operations team. This full-time, fully remote role focuses on helping clients meet CMMC and NIST requirements through documentation review and control validation.

You will learn from senior staff, develop artifacts, and contribute to SSPs, POA&M updates, and evidence repositories while growing into a lead compliance professional.