Senior Governance, Risk & Compliance (GRC) Analyst

Job Responsibilities

• CMMC Compliance & Regulatory Governance Support and enhance the organization's CMMC Level 1 and Level 2 compliance program in alignment with NIST SP 800-171 requirements.
• Maintain compliance documentation, including System Security Plans (SSPs), policies, procedures, Plans of Action and Milestones (POA&Ms), and supporting assessment artifacts.
• Cook with our Enclave hosting provider to ensure shared responsibility controls are clearly defined, documented, and monitored.
• Partner with control owners, business stakeholders, technology teams, and external assessors to evaluate compliance and track remediation activities.
• Support CMMC assessments, audits, and readiness activities through evidence collection, documentation management, and control validation.
• Monitor regulatory, contractual, and customer compliance requirements and help translate them into actionable business and technical processes.
• Communicate compliance obligations, risks, and program status clearly to both technical and non-technical audiences.

Qualifications/Requirements

• Required: Bachelor's degree in Information Systems, Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent professional experience.
• 5+ years of experience in governance, risk management, cybersecurity, compliance, audit, or related disciplines.
• Demonstrated experience supporting CMMC and NIST SP 800-171 compliance programs.
• Experience developing and maintaining SSPs, POA&Ms, policies, procedures, risk assessments, and audit evidence repositories.
• Experience administering or supporting a GRC platform, preferably Onspring.
• Strong understanding of risk management, governance principles, and compliance frameworks.
• Working knowledge of security controls, vulnerability management, access management, and networking fundamentals.
• Exceptional written and verbal communication skills.
• Strong organizational, analytical, and problem-solving abilities.
• Ability to manage multiple priorities independently while collaborating effectively across teams.