GRC Analyst / CMMC Lead

*Email brendan.steele@rht(.com) for consideration*

Robert Half (Technology Solutions) is searching for a Lead GRC Analyst (CMMC / Cybersecurity) + a Jr. GRC Analyst (CMMC / Cybersecurity) with experience in CMMC L2 assessments, GRC, NIST/ISO, Controls, Audit, Risk & Compliance ownership, etc. If this sounds like your background, then this GRC Analyst role(s) is for you. For this opportunity, you will work hybrid remote in Los Angeles, CA area.

Positions: Lead / Junior GRC Analyst (CMMC / Cybersecurity)

Hours/Duration: 40 hrs/wk, M-F, PST Hours, CTH/FTE (3-6 Months to Convert)

Top Skills: CMMC 2.0, GRC, NIST/ISO, Controls, Assessments, Risk & Compliance Ownership

Onsite/Remote: Hybrid Remote

Company: Startup / Aerospace Manufacturing

GRC Lead:

• Own the entire risk and compliance program around CMMC 2.0 end-to-end, through the C3PAO assessment
• Expand the program beyond CMMC over time into NIST 800-53, ISO 27001/27002, and future frameworks as the company grows
• M& A compliance integration — bring acquired entities into GRC alignment with each acquisition
• Customer onboarding compliance — partner with Legal and the federal acquisition process; own customer security questionnaires and ensure compliance through new customer onboarding
• Supply chain risk management — assess supplier compliance status, gap-to-compliant analysis, and remediation paths to bring suppliers current

GRC Analyst:

• Execution arm of the GRC program under the lead’s direction
• Control implementation legwork with internal teams — evidence collection, success criteria documentation, validation support
• Policy/procedure drafting and refinement to audit-ready standard
• POA& M upkeep, SPRS hygiene, questionnaire response support
• C3PAO assessment prep support (evidence organization, artifact readiness)

Qualifications:

GRC Lead:

• End-to-end CMMC Level 2 lifecycle experience — scoping through C3PAO assessment, with full ownership of at least one complete audit cycle
• Deep NIST 800-171 implementation depth; working knowledge of adjacent frameworks (NIST 800-53, ISO 27001/27002) — CMMC is today's mandate but the role expands into a multi-framework GRC program
• Program ownership capability — this seat owns audit readiness, not executes someone else's plan
• Startup/modern-environment fit — comfortable with non-traditional tooling and lightweight processes; must be able to interpret controls flexibly ("creative but compliant")
• Cross-functional operator — able to partner with Legal, supply chain, and engineering without heavy structure
• CCP/CCA: preferred, not a gate (confirmed)

GRC Analyst:

• NIST 800-171 / CMMC exposure — has worked inside a Level 2 program (doesn't need to have led one)
• Strong documentation skills — policy drafting/editing, SSP and POA& M maintenance, evidence package assembly
• Hands-on execution orientation — this is the doing seat, not a coordinator seat
• Comfortable in a lean, fast-moving startup environment with minimal process scaffolding
• CCP: nice-to-have only

*Email brendan.steele@rht(.com) for consideration*

Compensation

About Us

Technology Doesn't Change the World, People Do.®

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

Robert Half will consider for employment qualified applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

© 2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking “Apply Now,” you’re agreeing to Robert Half’s Terms of Use and Privacy Notice.