Cybersecurity Compliance Advisory Analyst

Cybersecurity Compliance Advisory Analyst I

Do you have strong analytical and communication skills, thrive in a collaborative environment, and have an interest in the US Department of Defense, US Military, or Aerospace & Defense industry? As a Cybersecurity Compliance Advisory Analyst I at Sierra Nevada Company, you will be an integral part of our Governance, Risk, and Compliance (GRC) team, learning and supporting efforts to ensure our organization adheres to stringent cybersecurity regulations and standards.

• Support the GRC team in developing and maintaining a unified CMMC
  2.0 and DFARS compliance program across the organization.
• Assist in interpreting and translating cybersecurity regulations (NISTSP
  800-171, CMMC
  2.0, and DFARS ) into actionable guidance for internal stakeholders.
• Support gap analyses to identify control deficiencies and assist in developing remediation recommendations.
• Help system owners gather and organize documentation in preparation for internal and external assessments, readiness reviews, and mock assessments.
• Assist in collecting data for continuous monitoring programs and compliance KPIs.
• Research and track evolving cybersecurity regulations, standards, and best practices relevant to the Defense Industrial Base (DIB).
• Assist in reviewing contracts and solicitations to identify applicable cybersecurity requirements and compliance obligations.
• Help ensure procurement and subcontract processes align with DFARS, CMMC
  2.0, and organizational cybersecurity requirements.
• Support monitoring of supplier and vendor cybersecurity compliance against contractual obligations and regulatory standards.

• Work in an office or hybrid environment.
• Prolonged periods sitting at a desk and working on a computer.
• May require occasional lifting of up to 20pounds.
• Ability to travel as needed.

Must Have

• Bachelor's degree in a related field.
• 0–2years in a related role; relevant experience can substitute for the required educational qualifications. In the absence of a degree, a minimum of 4years of related experience is required.
• Basic understanding of cybersecurity principles and practices.
• Familiarity with network security, threat analysis, and incident response.
• Knowledge of data security administration principles, methods, and techniques.
• Familiarity with domain structures, user authentication, and digital signatures.
• Foundational understanding of, or strong desire to learn, NISTSP
  800-171, DFARS, and CMMC
  2.0.
• Strong analytical and organizational skills with keen attention to detail.
• Strong written and verbal communication skills, with ability to translate complex regulatory requirements into clear, actionable guidance.
• Ability to learn quickly, manage multiple priorities, and work effectively as part of a collaborative team.

Preferred

• Ability to read and interpret security and technical documentation.
• Proven track record of maintaining the confidentiality of high‑sensitivity projects and data.
• Internship or project experience related to cybersecurity compliance, IT audit, or governance, risk, and compliance (GRC).
• Familiarity with contract language, procurement processes, or supply chain concepts within a government contracting environment.
• Familiarity with ISO
  9001 or similar quality management frameworks.
• Relevant entry‑level certifications (e.g., CompTIAA+, Network+, Security+) are a plus, but not required.
• Exposure to or academic coursework in federal regulatory frameworks, defense acquisition, or government contracting.

• Medical, dental, and vision plans.
• 401(k) with 150% match up to 6%.
• Life insurance.
• 3 weeks paid time off.
• Tuition reimbursement.
• Generous benefit package.

This position requires the ability to obtain and maintain a SecretU.S. Security Clearance. U.S. citizenship is required as the position needs an active U.S. Security Clearance for employment. Non‑U.S. citizens may not be eligible to obtain a security clearance.

SNC is an Equal Opportunity Employer committed to an environment free of discrimination. Employment decisions are made based on merit without regard to race, color, age, religion, sex, national origin, disability, status as a protected veteran or other characteristics protected by law.