CMMC Compliance Analyst

Job not on LinkedIn

🕒 January 22

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $70k - $90k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

👻 Ghost score 49%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sentinel Blue

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Sentinel Blue is a cybersecurity services firm based in Warrenton, VA, offering comprehensive cybersecurity solutions tailored to small and medium-sized businesses. The company specializes in fully managed cybersecurity services, compliance advisory, and Gov Cloud solutions, ensuring organizations are protected and compliant with industry standards. Utilizing best-in-class technologies like Microsoft Sentinel, Azure Government, and Zero Trust frameworks, Sentinel Blue provides services such as virtual CISO and CIO roles, security operations centers, and extended detection and response. The company is committed to enhancing its clients' cybersecurity maturity and regulatory compliance, particularly focusing on CMMC and risk assessments. Sentinel Blue prides itself on its core values of emerging technology leadership, excellence, and a client-centric approach.

📋 Description

• Review, triage, and analyze compliance-related requests, documentation, and assessment findings • Resolve compliance issues through research, evidence collection, and stakeholder coordination • Support development and maintenance of System Security Plans, POA&Ms, policy sets, procedures, and control documentation • Review client technical configurations against NIST/CMMC compliance objectives • Document compliance gaps and remediation actions • Communicate with clients through email, chat, meetings, and interviews to gather evidence and clarify processes • Assist with management, implementation, and validation of controls across CMMC, NIST 800-171, and/or DFARS 7012 • Contribute to compliance documentation templates, client-facing guidance, and evidence repositories • Support creation of compliance reports, risk assessments, briefs, and executive presentations • Learn to evaluate access control, logging, backups, and segmentation alongside experienced IT and security team members • Shadow senior staff, follow established playbooks, receive coaching, and progressively assume more responsibility

🎯 Requirements

• U.S. citizenship • Must be eligible for a Secret clearance • 2-5 years of experience in information security, IT compliance, cybersecurity auditing, GRC, or similar roles • Demonstrated ability to lead and make decisions on compliance-related matters, including interpreting control intent, assessing evidence, and determining whether control requirements have been met • Experience reviewing and developing policies, procedures, SSPs, POA&Ms, risk assessments, or similar compliance documentation • Working knowledge of IAM, endpoint protection, logging/monitoring, vulnerability management, segmentation, and backup/recovery strategies • Strong written and verbal communication skills, especially when translating technical information into actionable compliance guidance • Ability to work independently, manage multiple client tasks, and follow structured workflows • CompTIA Security+ certification required within the first 2 months of hire • Exposure to CMMC, NIST 800-171, NIST 800-53, DFARS 7012, or NIST RMF • Relevant certifications such as CMMC Certified Professional (CCP), Certified CMMC Assessor (CCA), CMMC Practitioner Instructor (PI), and/or CISSP • Experience in a multi-client consulting or managed services environment • Familiarity with Azure Government and Office 365 GCC High environments • Understanding of least privilege, RBAC, audit logging, configuration baselines, change management, and endpoint protection • Experience in a client-facing professional role • Interest in cloud-first architecture and securing Azure or Microsoft 365 environments • Experience with NIST 800-53, FedRAMP, ISO 27001, CIS Controls, or SOC 2 • Bachelor’s or Master's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related field is desired

🏖️ Benefits

• Fully paid individual healthcare, vision and dental insurance for the employee • Paid certification and training opportunities • Three weeks of paid vacation • 10 paid holidays • Supportive environment with a focus on keeping healthy work-life balance • Retirement benefit (401k) with company match • Security+ certification costs covered • Paid time to study for the Security+ certification • Opportunities for professional growth and transition into a team leadership role