Compliance Analyst at OSIbeyond in Rockville, MD

Summary: OSIbeyond is a company looking for a Compliance Analyst, ideal for IT Support or System Admin professionals aiming to transition into cybersecurity and compliance. The role involves supporting CMMC compliance programs for Department of Defense contractors through training and hands-on experience in audit readiness and ongoing compliance sustainment. Responsibilities: - Assist in developing and customizing policies, procedures and other supporting documentation for clients - Work closely with Compliance Managers and leadership to implement CMMC compliance requirements across several clients simultaneously - Assist with client audits and assessments by providing documentation and evidence to third party auditors - Review and validate client-provided evidence to ensure audit readiness and alignment with CMMC requirements - Assist in reviewing configurations in Microsoft 365 GCC/GCC High and other platforms to confirm alignment with documentation - Execute and track ongoing compliance activities to ensure continuous adherence to CMMC requirements post-assessment - Assist with Project Management responsibilities including facilitating meetings, calls and supporting notes and activities - Support delivery of OSIbeyond’s Compliance as a Service (CaaS) model, ensuring clients maintain continuous compliance rather than point-in-time certification - Work within Microsoft 365 GCC / GCC High environments to validate secure configurations aligned with CMMC controls - Other duties as assigned - Complete required training and maintain awareness of cybersecurity risks including insider threats and handling of regulated data - Treat company and client data as confidential and follow all applicable security and information protection policies - Follow cybersecurity procedures outlined in company policies and the employee handbook - Immediately report and follow incident response procedures for any suspected security incidents Required Qualifications: - 1–3 years of IT Support, Helpdesk, or System Administration experience - Existing Helpdesk, System Administration or Managed IT experience including knowledge of Microsoft 365 / Entra ID and Intune - Familiarity with common security tools including EDR / Antivirus, Vulnerability Scanning & Patch Management - Basic understanding of CMMC and/or NIST SP 800-171 requirements - Experience working with security policies, procedures, or compliance documentation - Familiarity with audit preparation, evidence collection, or regulated environments - Strong attention to detail and ability to follow structured processes - Interest in cybersecurity, compliance, or risk management Preferred Qualifications: - CMMC Registered Practitioner (RP) – Preferred, not required - Security+ or equivalent cybersecurity certification – Preferred Required Skills: IT Support, Helpdesk, System Administration, Microsoft 365, Entra ID, Intune, EDR, Antivirus, Vulnerability Scanning, Patch Management, CMMC, NIST SP 800-171, Security policies, Compliance documentation, Audit preparation, Evidence collection, Regulated environments Benefits: Medical Insurance - OSIbeyond pays 75% of the premium for the Employee's base medical plan, Vision and Dental Insurance - OSIbeyond pays 75% of the premium for the Employee's plans, Life Insurance - OSIbeyond pays 100% of the premium for the Employee's plans, Short Term Disability Insurance - OSIbeyond pays 100% of the premium for the Employee's plans, 401K - OSIbeyond matches up to 4%, PTO/Holidays - 9 paid Holidays and accrual based PTO which increases with tenure, new hires start out with 2 weeks.