[Hiring] CMMC Compliance Analyst @Sentinel Blue

Role Description

Sentinel Blue is looking for a CMMC Compliance Analyst to join our Operations team. This role is ideal for someone with a strong attention to detail and a passion for helping organizations meet regulatory and security standards. Our ideal candidate is a clear communicator who can translate technical concepts into plain language, work well with both executives and engineers, and approach compliance with a collaborative mindset. This role will support our clients by:

• Reviewing documentation
• Validating technical configurations
• Assessing environments against compliance objectives
• Helping build repeatable processes that lead to assessment readiness

This is a full-time position that is fully remote. Due to the nature of our work, you must be a U.S. citizen with eligibility for a clearance. No exceptions.

A day in the CMMC Compliance Analyst role:

• Support active client engagements by reviewing documentation
• Help validate technical controls against CMMC and NIST requirements
• Build core artifacts that drive audit readiness
• Assist with evidence collection
• Participate in client interviews
• Update POA&Ms
• Help maintain System Security Plans, policies, and procedures
• Learn to evaluate technical areas like access control, logging, backups, and segmentation
• Shadow senior staff and follow established playbooks
• Receive hands-on coaching and steadily take on more responsibility

Qualifications

• U.S. citizenship - by nature of our work with the defense industry, all employees must be eligible for a Secret clearance.
• 2-5 years of experience in information security, IT compliance, cybersecurity auditing, GRC, or similar roles.
• Demonstrated ability to lead and make decisions on compliance-related matters.
• Experience reviewing and developing policies, procedures, SSPs, POA&Ms, risk assessments, or similar compliance documentation.
• Working knowledge of technical environments such as IAM, endpoint protection, logging/monitoring, vulnerability management, segmentation, and backup/recovery strategies.
• Strong written and verbal communication skills.
• Ability to work independently and manage multiple client tasks.
• CompTIA Security+ certification is required in the first 2 months of hire.

Requirements

• Exposure to frameworks like CMMC, NIST 800-171, NIST 800-53, DFARS 7012, or NIST RMF in a professional environment.
• Relevant certifications such as CMMC Certified Professional (CCP), Certified CMMC Assessor (CCA), CMMC Practitioner Instructor (PI), and/or CISSP.
• Experience working in a multi-client consulting or managed services environment.
• Familiarity with Azure Government and Office 365 GCC High environments.
• Practical understanding of security and compliance policies.
• Experience in a client-facing professional role.
• Strong interest in cloud-first architecture and securing environments built in Azure or Microsoft 365.
• Experience with related frameworks such as NIST 800-53, FedRAMP, ISO 27001, CIS Controls, or SOC 2.
• Ability to interpret control intent, analyze evidence, and evaluate compliance objectives.
• Demonstrated passion for learning and professional growth.
• Bachelor's or Master's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related field.

Benefits

• Fully paid individual healthcare, vision and dental insurance for the employee.
• Paid certification and training opportunities.
• Three weeks of paid vacation + 10 paid holidays.
• A supportive environment with a focus on keeping healthy work-life balance.
• Retirement benefit (401k) with company match.