{"id":2736734,"url":"https://alion.io/job/sentinel-blue-cmmc-compliance-analyst","title":"CMMC Compliance Analyst","company":{"id":696063,"name":"Sentinel Blue","domain":"sentinelblue.com","url":"https://alion.io/company/sentinelblue","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":157000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":176},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"Instructor","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"SOC 2","optional":false},{"name":"IAM","optional":true}],"status":"live","first_seen_at":"2026-10-16T18:04:17Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-31T16:37:23Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Sentinel Blue is looking for a CMMC Compliance Analyst to join our Operations team. This role is ideal for someone with a strong attention to detail and a passion for helping organizations meet regulatory and security standards. Our ideal candidate is a clear communicator who can translate technical concepts into plain language, work well with both executives and engineers, and approach compliance with a collaborative mindset. This role will support our clients by reviewing documentation, validating technical configurations, assessing environments against compliance objectives, and helping build repeatable processes that lead to assessment readiness.\nThis is a full-time position that is fully remote. Due to the nature of our work, you must be a U.S. citizen with eligibility for a clearance. No exceptions.\nA day in the CMMC Compliance Analyst role:\nThe CMMC Compliance Analyst is a growth role built for someone who wants to learn the craft of compliance from the inside out. You will support active client engagements by reviewing documentation, helping validate technical controls against CMMC and NIST requirements, and building the core artifacts that drive audit readiness.\nYour day will include assisting with evidence collection, participating in client interviews, updating POA&Ms, and helping maintain System Security Plans, policies, and procedures. You will learn how to evaluate technical areas like access control, logging, backups, and segmentation by working alongside experienced IT and Security team members.\nYou will not be expected to know everything on day one. You will shadow senior staff, follow established playbooks, receive hands-on coaching, and steadily take on more responsibility as your skills grow. Over time, you will develop into a confident compliance professional capable of leading assessments and advisory work.\nResponsibilities:\nReceive, triage, and analyze compliance-related requests, documentation, and assessment findings, and work to resolve issues through research, evidence collection, and stakeholder coordination.\nSupport the development and maintenance of System Security Plans (SSPs), POA&Ms, policy sets, procedures, and control documentation across client environments.\nReview client technical configurations (e.g., access controls, logging, encryption, segmentation, backup strategies) against NIST/CMMC compliance objectives and document gaps or remediation actions.\nCommunicate with clients through email, chat, meetings, and interviews to gather evidence, clarify processes, and maintain progress visibility on compliance deliverables.\nAssist in the management, implementation, and validation of compliance controls across CMMC, NIST 800-171, and/or DFARS 7012.\nContribute to internal compliance documentation templates, client-facing guidance materials, and evidence repositories that streamline audit readiness.\nSupport the creation of compliance reports, risk assessments, briefs, and executive presentations that translate findings into clear business narrative.\nWhat We Can Offer:\nSentinel Blue is a young company with a focused mission: We’re bringing enterprise-class cybersecurity to small and medium sized businesses. Frankly, we’re pushing the envelope of how things are done and constantly seeking innovative ways to meet that mission. The pace is fast, and we’re always learning new things. This is a great place if you want to expose yourself to new and emerging technologies, want to be challenged, and want to build your skills. Further, success in this role can quickly transition into a team leadership role. The right person will find themselves in a fun, dynamic environment, working on interesting problems and making a real difference.\nYou will be required to achieve a Security+ certification in the first 2 months of hire; we’ll cover your certification costs and provide paid time for you to study!\nRequirements:\nU.S. citizenship - by nature of our work with the defense industry, all employees must be eligible for a Secret clearance.\n2-5 years of experience in information security, IT compliance, cybersecurity auditing, GRC, or similar roles.\nDemonstrated ability to lead and make decisions on compliance-related matters, including interpreting control intent, assessing evidence, and determining whether control requirements have been met.\nExperience reviewing and developing policies, procedures, SSPs, POA&Ms, risk assessments, or similar compliance documentation.\nWorking knowledge of technical environments such as IAM, endpoint protection, logging/monitoring, vulnerability management, segmentation, and backup/recovery strategies.\nStrong written and verbal communication skills, especially when translating technical information into actionable compliance guidance.\nAbility to work independently, manage multiple client tasks, and follow structured workflows to drive compliance activities to timely completion.\nCompTIA Security+ certification is required in the first 2 months of hire\nDesired Qualifications:\nExposure to frameworks like CMMC, NIST 800-171, NIST 800-53, DFARS 7012, or NIST RMF in a professional environment.\nRelevant certifications such as CMMC Certified Professional (CCP), Certified CMMC Assessor (CCA), CMMC Practitioner Instructor (PI), and/or CISSP.\nExperience working in a multi-client consulting or managed services environment. Prior work supporting multiple organizations simultaneously is highly valued.\nFamiliarity with Azure Government and Office 365 GCC High environments, including their unique compliance and security requirements.\nPractical understanding of security and compliance policies such as least privilege, RBAC, audit logging, configuration baselines, change management, and endpoint protection.\nExperience in a client-facing professional role, whether in IT, compliance, consulting, audit support, or similar fields.\nStrong interest in cloud-first architecture and securing environments built in Azure or Microsoft 365.\nExperience with related frameworks such as NIST 800-53, FedRAMP, ISO 27001, CIS Controls, or SOC 2.\nAbility to interpret control intent, analyze evidence, and evaluate whether technical or procedural safeguards meet compliance objectives.\nDemonstrated passion for learning and professional growth.\nBachelor’s or Master's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related field.\nBenefits:\nFully paid individual healthcare, vision and dental insurance for the employee.\nPaid certification and training opportunities.\nThree weeks of paid vacation + 10 paid holidays.\nA supportive environment with a focus on keeping healthy work-life balance.\nRetirement benefit (401k) with company match.","description_format":"text","description_chars":6689,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Dental insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-16T19:17:40Z"}],"visa":[],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.615,"p_room":0.9,"age_days":14,"expected_fill_days":35,"reasons":["conf:0","win:mid","comp:junior"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/sentinel-blue-cmmc-compliance-analyst","json_url":"https://alion.io/job/sentinel-blue-cmmc-compliance-analyst.json","meta":{"generated_at":"2026-10-31T18:19:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28570,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":696063},"rest":"https://alion.io/mcp/rest/get_company?id=696063"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsentinel-blue-cmmc-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsentinel-blue-cmmc-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsentinel-blue-cmmc-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sentinel-blue-cmmc-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsentinel-blue-cmmc-compliance-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2736734}},{"tool":"search_jobs","arguments":{"company":"sentinelblue.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2736734},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}