Compliance Specialist

What You Will Do

• Assessment Support
• Gather, organize, and review evidence for NIST SP 800-171 and CMMC assessments
• Prepare assessment workbooks and supporting materials for analysts
• Review policies, system screenshots, logs, and configurations for completeness
• Assist with requirement mapping, accuracy checks, and evidence validation
• Draft structured notes for assessment objectives under guidance
• Documentation Preparation
• Draft SSP narratives based on interviews and evidence
• Draft POAM entries with direction from senior team members
• Maintain version control and internal documentation organization
• Help improve internal templates, SOPs, and reference materials
• Technical and Process Verification
• Perform basic verification tasks such as checking MFA settings, encryption status, patch levels, or configuration parameters
• Absorb CUI flow mapping across systems, users, and processes
• Conduct structured research on controls, technologies, and implementation patterns
• Operational Support
• Maintain organized evidence repositories
• Support long-term client work under the direction of analysts and senior analysts
• Contribute to improving consistency and quality of deliverables

Who Thrives Here

• A strong and structured writer
• Curious and comfortable learning technical concepts
• Organized and reliable
• Analytical and able to follow logic
• Receptive to coaching and feedback
• Comfortable working in a process-driven environment
• Interested in eventually becoming a client-facing analyst

Ideal Backgrounds

• ISSO or ISSM supporting classified or government programs
• IT Administrators, System Administrators, or Network Administrators
• Service Desk, Desktop Support, or MSP technicians
• Technical compliance roles such as IT compliance coordinators or technical QA personnel in aerospace or manufacturing
• Who have validated system-level controls or gathered IT evidence for audits
• Military veterans with IT, cyber, comms, or intelligence backgrounds

Required Skills

• Clear, professional writing
• Ability to follow structured processes
• Foundational understanding of IT systems such as Active Directory, MFA, patching, Windows security, or similar
• Strong attention to detail
• Ability to learn frameworks and requirements through training
• Comfort with documentation-heavy and evidence-driven work
• Consistent performance in a remote environment

Nice To Have

• Experience supporting classified or government programs
• Exposure to NIST SP 800-171 or CMMC
• Experience gathering or validating technical evidence
• Familiarity with manufacturing, aerospace, or defense environments

Career Path at CyberSheath

• Compliance Specialist
• Learn assessment fundamentals, documentation, and evidence processing.
• Compliance Analyst
• Client-facing role. Lead parts of assessments, manage long-term clients, deliver advisory work, and write structured narratives.
• Senior Compliance Analyst
• Independent delivery. Run pro-services engagements, own complex clients, lead assessments end-to-end, and mentor junior analysts.

Budgeted Pay Range

$60,000 USD - $80,000 USD