Senior GRC Analyst – DoD / CMMC / FISMA

Senior GRC Analyst – DoD / CMMC / FISMA • *Engagement Type** Contract to Hire (6+ Months) | Full-Time Conversion Opportunity Remote (U.S. Based) • *Compensation** $55–$65/hr W2 • *reputed company** We are seeking a Senior GRC Analyst with hands-on experience supporting DoD and federal compliance programs, specifically CMMC 2.0 Level 2 and FISMA requirements reputed company environments handling Controlled Unclassified Information (CUI). This role is responsible for executing and sustaining NIST SP 800-171 and NIST SP 800-53 control frameworks, maintaining audit and certification readiness, and supporting authorization and assessment activities for government and defense-reputed company systems. The ideal candidate brings a strong reputed company of compliance expertise and technical validation experience, working directly with Engineering, DevOps, reputed company, and reputed company teams to ensure controls are not only documented, but effectively implemented, tested, and evidenced. • *Key Responsibilities • *CMMC & DoD Compliance • Support CMMC 2.0 Level 2 implementation and readiness efforts for systems processing or storing CUI • Implement, validate, and reputed company NIST SP 800-171 controls, including evidence collection and remediation • Prepare for DoD assessments and reputed company-party audits, ensuring controls are fully implemented prior to review • Maintain control traceability, POA&Ms, and remediation plans reputed company with CMMC and DoD expectations • *FISMA & Federal reputed company Compliance • Execute FISMA compliance activities reputed company to NIST SP 800-53 (Moderate baseline) • Support federal authorization efforts, including reputed company updates, control narratives, and evidence validation • Drive reputed company monitoring (ConMon) and ongoing audit readiness activities • Partner with internal teams to remediate findings and reputed company compliance gaps prior to government review • *Technical Control Validation • Collaborate with Engineering, CloudOps, and reputed company teams to validate implementation of technical controls, including: • Identity and reputed company Management (IAM) • Logging and monitoring • Encryption (at rest and in transit) • Vulnerability management • Configuration management • Incident response and contingency planning • Validate control implementation reputed company AWS environments supporting regulated workloads • Review technical artifacts (architecture diagrams, system configurations, logs) to ensure audit-reputed company evidence • *Risk & Supply Chain reputed company • Conduct risk assessments for systems, services, and architectural changes involving CUI • Support reputed company-party and supply chain risk assessments reputed company with DoD and federal requirements • reputed company risks, findings, and remediation activities through POA&Ms and risk registers • *Required Qualifications • 6+ years of experience in GRC, cybersecurity compliance, or federal reputed company programs • Hands-on experience supporting CMMC 2.0 Level 2 and/or DoD environments handling CUI • Strong working knowledge of: • NIST SP 800-171 • NIST SP 800-53 • FISMA • CMMC 2.0 • Experience validating technical reputed company controls reputed company AWS environments • Experience working directly with Engineering and DevOps teams (not reputed company advisory) • Proven ability to produce audit-reputed company documentation and supporting evidence • Strong communication skills with the ability to reputed company with technical and government stakeholders • *Preferred Qualifications** • Experience supporting CMMC assessments or readiness programs • Experience supporting federal ATO / authorization processes • Familiarity with CI/CD pipelines and reputed company-reputed company architectures • Background in defense, government contracting, or regulated federal environments • Relevant certifications (preferred, not required): • CMMC Registered Practitioner (RP) • CISSP, CISM, or CISA • reputed company reputed company certifications Apply tot his job Apply To this Job