Senior Compliance Analyst
Core
Lead enterprise cybersecurity compliance strategy, manage global certifications (CMMC, ISO 27001), and serve as SME for risk management and audit readiness.
Role type
Senior IC cybersecurity compliance analyst (GRC)
Builds
Unified cybersecurity compliance framework, GRC documentation, and executive compliance dashboards
Domain
Defense technology / Cybersecurity / Regulatory Compliance
Required skills
Cybersecurity GRC strategy, CMMC/NIST SP 800-171/ISO 27001/GDPR framework expertise, risk assessment and auditing, GRC tool implementation, M&A security due diligence, executive reporting
Preferred skills
CISSP/CISA/CRISC/CISM certifications, MBA or advanced degree, enterprise GRC platform management, Aerospace/Defense industry experience
Technologies
CMMC, NIST SP 800-171, ISO 27001, GDPR, GRC platforms
Responsibilities
Lead enterprise-wide unified cybersecurity framework lifecycle, author GRC documentation (SSPs, POA&Ms), design security risk assessments and internal audits, facilitate external regulatory audits, advise on M&A and supply chain security, develop executive compliance metrics and dashboards
Seniority
Senior, hands-on IC