Cmmc Controls

Cmmc Controls Cybersecurity Jobs

6 jobs found

4d ago

Cybersecurity Analyst

Stratus Services, LLC Anchorage, AK

Anchorage, AK

4d ago

$65k - $85k/yr Full time Azure Virtual Desktop Cloud Platforms Cloud Security

Apply Now

Job Description

Stratus Services, LLC is seeking a Cybersecurity Analyst to support cybersecurity and compliance work, with an emphasis on CMMC and NIST-based frameworks. This onsite role in Anchorage, AK focuses on helping assess, implement, and sustain security controls across internal systems and client environments to support federal and industry compliance expectations.

In this position, you will collaborate across Microsoft cloud and endpoint security capabilities, supporting day-to-day operations while contributing to documentation and evidence readiness. The goal is to keep security controls current, troubleshoot issues, and escalate complex matters to senior engineers with clear context.

Responsibilities

Support and administer Azure environments, including VMs, virtual networks, storage, Entra ID, and resource groups across client tenants
Manage Intune device enrollment, configuration profiles, compliance policies, and app deployments, including troubleshooting when deployments do not behave as expected
Support Microsoft Defender for Endpoint, including onboarding devices, monitoring alerts, and escalating or resolving issues as appropriate
Assist with Azure Virtual Desktop operations such as session host management, FSLogix profile troubleshooting, and image updates
Assist with Conditional Access and MFA configuration and troubleshooting in Entra ID
Write basic PowerShell scripts for routine tasks and use existing automation for repetitive work
Document configurations, update runbooks, and maintain current records
Escalate complex issues to senior engineers with organized notes on what has already been attempted

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
CompTIA Security+ (required) or equivalent certification
1–3 years of experience in cybersecurity, IT security, or compliance-related roles
Basic understanding of risk management principles
Familiarity with security tools including SIEM, endpoint protection, vulnerability scanners, and MFA solutions
Strong analytical, organizational, and documentation skills
Excellent written and verbal communication skills

Technologies

Azure, VMs, virtual networks, storage, Entra ID, resource groups
Intune, Microsoft Defender for Endpoint, Azure Virtual Desktop, FSLogix
Conditional Access, MFA, PowerShell
CMMC (Cybersecurity Maturity Model Certification), NIST SP 800-171

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Vision insurance

Preferred Qualifications

CompTIA CySA+, GSEC, or similar certification
Experience supporting DoD contractors or federal compliance requirements
Knowledge of Microsoft 365 security tools (Defender, Sentinel, Intune, etc.)
Experience with audit preparation and evidence collection
Familiarity with NIST SP 800-171 or CMMC framework

Core Competencies

Attention to detail
Problem-solving mindset
Strong ethical standards and integrity
Ability to manage multiple tasks and deadlines
Team-oriented with client-facing professionalism

Compensation: USD 65,000 - 85,000 per year.

Experience Level: Minimum 1 year.

Certification: CompTIA Security+ (required) or equivalent.

View full job page →

20d ago

Cybersecurity Specialist #580

Photo-Sonics Chatsworth, CA

Chatsworth, CA

20d ago

$58 - $68/hr Full time Cmmc Controls Cybersecurity Tools Data Security

Apply Now

Job Description

This Cybersecurity Specialist role protects Photo-Sonics’ systems, networks, and data, ensures compliance with federal requirements for a government defense contractor, and leads CMMC activities onsite in Chatsworth, CA.

Responsibilities

Lead a cross‑functional team to achieve Cybersecurity Maturity Model Certification (CMMC).
Drive the development, deployment, and ongoing governance of the organization’s cybersecurity strategy aligned with CMMC requirements.
Continuously monitor network activity with SIEM tools to detect anomalies and unauthorized access.
Conduct security assessments and simulated attacks to identify vulnerabilities before exploitation.
Act as the incident response lead during breaches, contain threats, coordinate data recovery, and minimize downtime.
Advise leadership on risk management, security procedures, and regulatory compliance for data protection.
Implement defensive controls such as firewalls, data encryption, and timely software patching.
Maintain security documentation and update the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) as needed.
Communicate security matters clearly with employees, vendors, and customers.
Oversee IT asset inventory to ensure compliance.
Protect highly confidential information and shield internal users from external threats, including hackers and malware.
Serve as a backup to the IT team for IT support duties.
Perform other duties as assigned.

Requirements

Bachelor’s Degree
Systems Security Certified Practitioner (SSCP) certification required
5+ years of recent, relevant experience
Working knowledge of CMMC, NIST SP 800-171, DFARS 252.204-7012, and FAR 52.204-21

Technologies

Security Information and Event Management (SIEM)
Intrusion Detection Systems (IDS)
Firewalls
Proxies
VPNs
TCP/IP
Routing
Switching
Data encryption

Benefits

401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Life insurance
Parental leave
Vision insurance

Education

Bachelor’s Degree
Systems Security Certified Practitioner (SSCP) certification required
Certified Information Systems Security Professional (CISSP) certification preferred

Experience

5+ years of recent, relevant experience
Working knowledge of CMMC, NIST SP 800-171, DFARS 252.204-7012, and FAR 52.204-21

Desired Skills

Research, analyze, and interpret data on emerging cyber threats, attack vectors, and trends
Proficiency in computer networks, operating systems, security software, and hardware
Strong grasp of TCP/IP, VPNs, routing, and switching; ability to configure and manage firewalls, IDS, and proxies
Provide quick identification and resolution of security incidents
Assess threats, evaluate risks, and devise effective solutions
Automate security tasks and understand attacker code
Understand CMMC to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI)
Stay current with evolving cyber threats and adversarial tactics
Excellent organizational and follow‑up skills for handling multiple projects
Ability to work with minimal supervision
Excellent verbal and written communication
Proficient in Word and Excel
Strong analytical skills
Professional written and spoken communication
Ability to work overtime as needed

Preferred Skills

Knowledge of DFARS and mandatory incident reporting
Security implementation experience
Strong communication, instructional design, and threat awareness to educate employees
Policy development, risk assessment, and regulatory knowledge

Physical Requirements

Ability to walk, sit, talk, and hear; stand and use hands to reach, handle, or feel
Occasional climbing or balancing in lab or field environments
May lift up to 15 lbs and stand/walk for extended periods

Work Location

In person

View full job page →

1mo ago

Cybersecurity Consultant-Japanese Bilingual

PASONA N A, INC. New York, NY

New York, NY

1mo ago Closed

$120k - $150k/yr Full time Cis Controls Cloud Platforms Cmmc Controls

This position is no longer accepting applications (closed Aug 9, 2026).

Job Description

The Cybersecurity Consultant role supports Japanese multinational organizations operating in North America by assessing cyber risk, strengthening governance, and shaping strategic roadmaps. The position may function as a Virtual Chief Information Security Officer for select clients.

Key Responsibilities

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps that align with organizational objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity initiatives
Conduct cybersecurity risk assessments and control evaluations
Perform readiness assessments and gap analyses against frameworks and regulatory requirements such as NIST CSF, ISO 27001/27002, NYDFS Part 500, HIPAA Security Rule, CMMC, SOC 2, and CIS Controls
Develop remediation plans and implementation recommendations
Serve as a trusted cybersecurity advisor for organizations without dedicated security leadership
Participate in executive meetings and annual cybersecurity program reviews
Support governance and strategic decision-making processes
Review and recommend target-state architectures across IAM, SSO, MFA, Network Security, Endpoint Protection, Cloud Security, and Data Protection & DLP
Align cybersecurity programs with modernization and digital transformation initiatives
Provide executive-level post-incident guidance and recommendations
Facilitate root-cause analyses and lessons-learned sessions
Assist with regulatory notification considerations and remediation planning
Build long-term trusted relationships with executive stakeholders
Present findings and recommendations to senior leadership teams and boards
Coordinate with delivery, engineering, and customer success teams to ensure effective execution of advisory recommendations
Contribute to methodology development, service innovation, and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and cybersecurity awareness programs

Required Qualifications

Minimum 10 years of experience in cybersecurity, information risk management, IT governance, security consulting, or related advisory disciplines
Minimum 5 years in a senior consulting, cybersecurity leadership, risk advisory, governance, or Virtual CISO role
Experience advising executive stakeholders including CIOs, CISOs, Boards, Audit Committees, and Executive Leadership Teams
Working knowledge of NIST CSF
Working knowledge of ISO 27001/27002
Working knowledge of NYDFS Part 500
Working knowledge of HIPAA Security Rule
Working knowledge of CMMC
Working knowledge of CIS Controls
Understanding of enterprise cybersecurity architecture and technology domains, including IAM, SSO, MFA
Cloud Security experience (AWS, Azure, Microsoft 365)
Network Security, Endpoint Security
Vulnerability Management and Data Protection

Technologies

AWS
Azure
Microsoft 365
NIST Cybersecurity Framework (CSF)
ISO 27001/27002
NYDFS Part 500
HIPAA Security Rule
CMMC
CIS Controls
SOC 2
Identity and Access Management (IAM)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Cloud Security
Data Protection
Data Loss Prevention (DLP)
Vulnerability Management
Network Security
Endpoint Security

Benefits

Benefits package
Visa and relocation support

Location

New York, NY (Hybrid)
Hybrid work arrangement with approximately 2–3 days per week in the office
Periodic travel within the United States for customer engagements, with occasional international travel as needed

Language Requirements

Japanese: Native or Business Professional Proficiency (Required)
English: Business Professional Proficiency (Strongly Preferred)

Position Overview

We seek an experienced Senior Cybersecurity Consultant to join a growing advisory practice supporting Japanese multinational enterprises across North America. The role acts as a trusted adviser to executive leadership, helping clients assess risk, fortify governance programs, enhance regulatory readiness, and build strategic roadmaps. The successful candidate will engage directly with CIOs, CISOs, IT Directors, General Managers, Executive Committees, and Board Members to deliver actionable recommendations that align security initiatives with business goals. The ideal candidate combines business acumen with deep cybersecurity expertise, regulatory knowledge, and strong communication skills. This position may also function as a Virtual CISO for select engagements.

Key Responsibilities (Expanded)

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps aligned with objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity
Conduct risk assessments and control evaluations
Perform readiness and gap analyses against leading frameworks and regulations
Develop remediation plans and implementation recommendations
Act as a trusted advisor for organizations lacking security leadership
Participate in executive meetings and annual program reviews
Support governance and strategic decision-making
Review target-state security architectures across IAM, SSO, MFA, and related domains
Align programs with modernization and digital transformation
Provide post-incident guidance and root-cause analysis facilitation
Assist with regulatory notification considerations and remediation planning
Build long-term executive relationships and present findings to boards
Coordinate with delivery, engineering, and customer success teams for execution
Contribute to methodology development and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and awareness programs

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, or related field
Master's degree preferred

Certifications

CISSP
CISM
CISA
CRISC
CGEIT
Equivalent cybersecurity certification

Preferred Qualifications

Experience with Japanese multinational corporations in North America
Background in financial services, manufacturing, insurance, telecommunications, or regulated industries
Experience supporting governance, risk management, internal controls, and compliance programs
Familiarity with security operations, incident response, threat intelligence, cloud security, or security architecture
Cloud certifications such as AWS, Azure, or Microsoft Security
demonstrated thought leadership through publications or industry involvement

How to Apply

Email your resume to xjiang@pasona.com

View full job page →

1mo ago

Senior Cybersecurity GRC Analyst

The Norland Group San Jose, CA

San Jose, CA

1mo ago Closed

$85 - $95/hr Full time Senior Cmmc Controls Enterprise Risk

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

The Norland Group seeks a Senior Cybersecurity GRC Analyst to lead governance, risk, and compliance initiatives across the organization. The role encompasses audits, risk assessments, identity and access governance, third-party risk management, and policy and process engineering. This on-site position is based in San Jose, CA.

Responsibilities

Develop and manage the overarching Compliance Program to align with industry standards such as SOC 2, NIST 800-171, ISO 27001, and NIST 800-53.
Collaborate with IT Security Operations to ensure security controls are properly designed, implemented, and operating effectively.
Lead the end to end cybersecurity audit process, including preparation of response documentation and execution of remediation plans.
Produce and distribute high level information security reports and compliance dashboards for key stakeholders.
Direct comprehensive cybersecurity risk assessments across the enterprise, identifying vulnerabilities and recommending prioritized mitigations.
Develop and maintain the Corporate Risk Register, tracking risk acceptance, treatment plans, and residual risk.
Perform quantitative and qualitative risk analysis to inform executive decision making and resource allocation.
Oversee and collaborate with stakeholders to execute quarterly user access reviews and monthly user activity monitoring.
Ensure timely completion, technical accuracy, and rigorous documentation of all access reviews to meet audit requirements.
Analyze access trends and over privileged accounts to recommend Least Privilege improvements and RBAC refinements.
Own and maintain Third-Party Risk Management evaluation practices, ensuring vendors are vetted against corporate security standards to mitigate supply chain risk.
Author, maintain, and update information security policies and Standard Operating Procedures to align with evolving industry standards.
Manage and govern Change Management processes to maintain security stability and compliance during technical transitions.

Requirements

Experience: Minimum 10 years of experience managing cybersecurity compliance programs from inception to completion.
Technical Expertise: Hands on experience with SOC 2 and a deep understanding of IT security controls.
Framework Proficiency: Expert knowledge of ISO 27001, CIS v8.1, NIST 800-53, NIST 800-171, CMMC, and FedRAMP.
Analytical Skills: Strong analytical thinking with the ability to prioritize complex tasks in a fast paced, evolving environment.
Communication: Excellent interpersonal, verbal, and written communication skills, able to work effectively as part of a team or independently.
Security Knowledge: Solid foundation in IT security concepts with emphasis on Security Risk Assessment.
Certifications: CISSP, CISM, or CISA preferred.
Preferred Qualifications: Exceptional ability to tailor complex technical communication for both technical audiences and non technical executive leadership.

Technologies

SOC 2
NIST 800-171
ISO 27001
NIST 800-53
CIS v8.1
CMMC
FedRAMP

Location

Onsite at our San Jose office headquaters, five days a week.

View full job page →

1mo ago

Trade Compliance, Contracts, and Cybersecurity Manager

Kensington Electronics, Inc. Austin, TX

Austin, TX

1mo ago Closed

$80k - $115k/yr Full time Manager Cmmc Controls Compliance

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

This role oversees trade compliance, contracts, and cybersecurity controls for Kensington Electronics' electronics distribution business.

Responsibilities

Assess incoming customer purchase orders, terms and conditions, and flow-down requirements prior to order acceptance.
Spot and escalate clauses tied to CMMC, CUI, cybersecurity, indemnification, insurance, penalties, data rights, and other obligations the organization cannot or will not accept.
Support programs for CMMC, NIST SP 800-171, and Controlled Unclassified Information handling.
Assist with ITAR related compliance and export control data handling where applicable.
Perform restricted party and denied party screening on customers, buyers, vendors, and other counterparties.
Complete customer surveys, vendor onboarding surveys, compliance questionnaires, and related onboarding documentation.
Collaborate with sales, purchasing, operations, finance, quality, and leadership to manage compliance risk and contractual exposure.
Maintain organized compliance records and support practical internal cybersecurity controls.

Requirements

5+ years of experience in trade compliance, contract review, customer compliance, cybersecurity compliance, export controls, or related risk management.
Direct experience with CMMC and CUI compliance requirements.
Direct experience with ITAR regulations.
Experience reviewing customer terms, flow-down clauses, or contract requirements.
Experience performing denied party or restricted party screening.
Strong documentation, organizational, and follow-through skills.
Sound judgment with the ability to escalate risk appropriately.

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Health savings account
Life insurance
Paid time off
Vision insurance

Preferred Qualifications

Experience in electronics distribution, aerospace or defense supply chains, or other regulated distribution environments
Experience in a small to mid-sized business with broad, hands-on responsibilities
Working knowledge of NIST SP 800-171
Experience with customer surveys, vendor onboarding forms, and compliance questionnaires

Ideal Candidate

Fits best in a distributor setting with practical business compliance awareness
Detail-oriented, confident interpreting contractual requirements, and comfortable escalating risk
Experienced with CMMC, CUI, ITAR, and restricted party screening

Application Questions

Do you have direct hands-on experience with CMMC compliance requirements?
Do you have direct hands-on experience with Controlled Unclassified Information handling requirements?
Do you have direct hands-on experience with ITAR regulations?
Have you reviewed customer terms and conditions, flow-down clauses, or contract requirements for compliance or business risk?
Have you performed denied party or restricted party screening using U.S. government databases?
Do you have experience in a regulated distributor, aerospace/defense, or customer-driven compliance environment?

Work Location

In person
Onsite in Austin, TX

Pay

USD 80,000 - 115,000 per year

View full job page →

1mo ago

Senior Cybersecurity Program Manager

The Norland Group San Jose, CA

San Jose, CA

1mo ago Closed

$85 - $95/hr Full time Manager Senior Cmmc Controls

This position is no longer accepting applications (closed Jul 27, 2026).

Job Description

The Norland Group seeks a Senior Cybersecurity Program Manager to lead the development and ongoing maintenance of IT security policies, steer enterprise cybersecurity programs, governance, risk and compliance efforts, and collaborate with cross functional teams to mature the organization’s security posture.

Compensation

USD 85 - 95 per hourly

Location

San Jose, CA onsite (five days per week)

Responsibilities

Develop and document comprehensive IT security policies, standards, and procedures from the ground up
Collaborate with IT and Security teams to identify policy gaps and requirements
Draft and maintain enterprise wide security policies covering access control, data protection, incident response, and other critical areas
Ensure all policies and procedures align with regulatory requirements, compliance frameworks, and industry best practices
Regularly review and update existing policies to reflect organizational changes and evolving threats
Establish clear, enforceable standards that are communicated and understood across technical and non technical teams
Document procedures with step by step guidelines for consistent implementation across departments
Conduct periodic audits of policy compliance and recommend updates based on findings and lessons learned
Facilitate policy review cycles and stakeholder approvals
Develop, establish, and maintain enterprise wide cybersecurity programs aligned with business objectives and best practices
Create and execute multi year cybersecurity roadmaps and strategic plans
Define program objectives, metrics, and key performance indicators to measure effectiveness
Identify emerging threats and trends and adjust program strategies accordingly
Manage program budgets and allocate resources to optimize utilization
Lead and collaborate with IT, Security Operations, Risk Management, Compliance, and business unit leaders
Establish governance frameworks and decision making processes for cybersecurity initiatives
Coordinate with external stakeholders, vendors, and third party service providers
Facilitate communication between technical and non technical teams to ensure program understanding
Promote cybersecurity culture and awareness across the organization
Ensure compliance with applicable regulatory requirements such as CCPA, CPRA, SOC 2, and CMMC
Conduct and oversee risk assessments, vulnerability assessments, and penetration testing programs
Develop and maintain security policies, procedures, and standards
Monitor and report on security posture and compliance status to executive leadership and the Board
Lead incident response planning and coordination during security incidents
Oversee design, deployment, and optimization of security tools, technologies, and controls
Manage security architecture reviews and technology evaluations
Drive continuous improvement initiatives within the cybersecurity program
Document program processes, procedures, and operational guidelines
Ensure effective program documentation and knowledge management
Provide executive leadership with regular updates on program status, risks, and achievements
Develop and present compliance metrics, dashboards, and reports to senior management
Communicate compliance requirements and implications to business stakeholders
Escalate critical issues and risks appropriately

Requirements

10+ years of experience in cybersecurity, including at least 5 years in a program management or leadership role
Proven track record writing, developing, and maintaining IT security policies, standards, and procedures from scratch
Demonstrated ability to collaborate with IT and security teams to create comprehensive policy documentation
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
Deep knowledge of cybersecurity frameworks and standards (NIST CSF, ISO 27001, CIS, SOC 2, CMMC Controls)
Experience with security governance and policy development
Expertise in risk management and compliance requirements across regulated industries
Strong understanding of security controls, threat modeling, and vulnerability management
Proficiency in program management methodologies (Agile, Waterfall)
PMP or a similar project management certification
Excellent project management skills with the ability to manage multiple complex initiatives simultaneously

Technologies

NIST CSF
ISO 27001
CIS
SOC 2
CMMC Controls

Job Details

Job Posted Date: 6/22/2026

View full job page →

Cmmc Controls Cybersecurity Jobs

Cybersecurity Analyst

Cybersecurity Specialist #580

Cybersecurity Consultant-Japanese Bilingual

Senior Cybersecurity GRC Analyst

Trade Compliance, Contracts, and Cybersecurity Manager

Senior Cybersecurity Program Manager

Get Cmmc Controls Cybersecurity Jobs alerts