Senior GRC Analyst: CMMC, Risk & Audit Readiness

Cianbro; North Stonington (CT); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

Employee-owned company

Job summary

Cianbro is seeking a Senior Governance, Risk & Compliance (GRC) Analyst to mature and support the organization’s governance, risk management, and compliance programs. You will focus on CMMC Level 1/2, enterprise risk management, audit readiness, and third‑party risk with Onspring GRC.

Strong communication skills and translating complex regulations into practical controls are essential. The role reports to the Director of IT Risk Management and collaborates with auditors, assessors, and

Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, Information Technology, Business, Risk Management, or related field, or equivalent professional experience.
• 5+ years in governance, risk management, cybersecurity, compliance, audit, or related disciplines.
• Experience supporting CMMC and NIST SP 800-171 compliance programs.
• Experience developing and maintaining SSPs, POA&Ms, policies, procedures, risk assessments, and audit evidence repositories.
• Experience administering or supporting a GRC platform, preferably Onspring.

Responsibilities

• Support and mature the organization's governance, risk management, and compliance processes across CMMC, NIST SP 800-171, and audits.
• Coordinate with stakeholders and external assessors to track remediation activities and ensure audit readiness.
• Develop and enhance Business Continuity and Operational Resilience programs, BIAs, and recovery plans.
• Manage GRC documentation, evidence, and dashboards within the Onspring platform.
• Translate regulatory requirements into actionable business processes and controls for leadership.

Skills

CMMC

NIST SP 800-171

Onspring

Risk management

Education

Bachelor's degree in Information Systems/Cybersecurity/IT or related field

Tools

Onspring

Job description

Cianbro is seeking a Senior Governance, Risk & Compliance (GRC) Analyst to mature and support the organization’s governance, risk management, and compliance programs. You will focus on CMMC Level 1/2, enterprise risk management, audit readiness, and third‑party risk with Onspring GRC.

Strong communication skills and translating complex regulations into practical controls are essential. The role reports to the Director of IT Risk Management and collaborates with auditors, assessors, and