CMMC Compliance Analyst

Sentinel Blue is looking for a CMMC Compliance Analyst to join our Operations team. This role is ideal for someone with a strong attention to detail and a passion for helping organizations meet regulatory and security standards. Our ideal candidate is a clear communicator who can translate technical concepts into plain language, work well with both executives and engineers, and approach compliance with a collaborative mindset.

This role will support our clients by reviewing documentation, validating technical configurations, assessing environments against compliance objectives, and helping build repeatable processes that lead to assessment readiness.

This is a full-time position that is fully remote.
Due to the nature of our work, you must be a U.S. citizen with eligibility for a clearance. No exceptions.

The CMMC Compliance Analyst is a growth role built for someone who wants to learn the craft of compliance from the inside out. You will support active client engagements by reviewing documentation, helping validate technical controls against CMMC and NIST requirements, and building the core artifacts that drive audit readiness.
Your day will include assisting with evidence collection, participating in client interviews, updating POA&Ms, and helping maintain System Security Plans, policies, and procedures. You will learn how to evaluate technical areas like access control, logging, backups, and segmentation by working alongside experienced IT and Security team members.
You will not be expected to know everything on day one. You will shadow senior staff, follow established playbooks, receive hands‑on coaching, and steadily take on more responsibility as your skills grow. Over time, you will develop into a confident compliance professional capable of leading assessments and advisory work.

• Receive, triage, and analyze compliance‑related requests, documentation, and assessment findings, and work to resolve issues through research, evidence collection, and stakeholder coordination.
• Support the development and maintenance of System Security Plans (SSPs), POA&Ms, policy sets, procedures, and control documentation across client environments.
• Review client technical configurations (e.g., access controls, logging, encryption, segmentation, backup strategies) against NIST/CMMC compliance objectives and document gaps or remediation actions.
• Communicate with clients through email, chat, meetings, and interviews to gather evidence, clarify processes, and maintain progress visibility on compliance deliverables.
• Assist in the management, implementation, and validation of compliance controls across CMMC, NIST 800-171, and/or DFARS 7012.
• Contribute to internal compliance documentation templates, client‑facing guidance materials, and evidence repositories that streamline audit readiness.
• Support the creation of compliance reports, risk assessments, briefs, and executive presentations that translate findings into clear business narrative.

Sentinel Blue is a young company with a focused mission:
We’re bringing enterprise‑class cybersecurity to small and medium sized businesses. Frankly, we’re pushing the envelope of how things are done and constantly seeking innovative ways to meet that mission. The pace is fast, and we’re always learning new things. This is a great place if you want to expose yourself to new and emerging technologies, want to be challenged, and want to build your skills.

Further, success in this role can quickly transition into a team leadership role. The right person will find themselves in a fun, dynamic environment, working on interesting problems and making a real difference.

You will be required to achieve a…