Hotman Group, LLC

Analyst

• Support client engagements related to CMMC readiness, implementation, and documentation
• Develop, update, and maintain System Security Plans (SSPs)
• Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverables
• Gather, organize, and review evidence supporting control implementation
• Draft and refine control narratives, policies, procedures, and related compliance documentation
• Identify gaps and support development of POA&Ms and remediation tracking
• Work with client stakeholders to collect information, validate details, and keep deliverables moving
• Contribute to readiness efforts tied to assessments, documentation, and ongoing compliance activities

CMMC/NIST Consultant, Analyst

Business Development Rep

• Focus on outbound business development activities that generate qualified sales conversations.
• Researching target companies, industries, and key decision-makers
• Building and managing prospect lists
• Executing outbound outreach through phone, email, LinkedIn, networking, events, and other channels
• Writing personalized outreach that reflects the prospect’s business needs and likely pain points
• Starting conversations with qualified buyers and moving them toward a scheduled meeting
• Tracking activity, pipeline progress, and notes in HubSpot
• Partnering with internal leadership on messaging, priorities, and target account strategy
• Reporting weekly on outreach activity, meeting volume, pipeline movement, and observations from the market

Business Development Representative

Account Executive

• Identify and research prospects who fit our ICP.
• Build targeted lead lists from scratch using LinkedIn Sales Navigator, Apollo, Crunchbase, and other tools.
• Craft personalized outreach that grabs attention and sparks interest.
• Make cold calls, leave thoughtful voicemails, and keep the energy high.
• Run multi-channel sequences across email, LinkedIn, phone, and text to break through the noise.
• Book and set up intro meetings for HG’s partners and subject matter experts.
• Track and report activity in Pipedrive, sharing weekly updates on progress and wins.
• Look for ways to work smarter, using automation and efficiency where possible.

Business Development, Account Executive – Client Acquisition

Compliance

• Lead assessments and audits of security and IT control environments
• Design, implement, and mature cybersecurity and compliance programs
• Develop risk registers, conduct risk assessments, and track remediation efforts
• Create and refine policies, standards, and procedures that align with top frameworks (SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST, and more)
• Guide third-party vendor risk management programs
• Prepare clients for internal audits and external assessments
• Translate technical, regulatory, and business requirements into clear, actionable solutions
• Mentor junior analysts and contribute to the growth of our GRC practice.

Senior GRC Analyst

• Assess and improve client security and IT controls
• Develop policies, processes, and risk assessments aligned to top frameworks like NIST, ISO 27001, and SOC 2
• Crosswalk and harmonize controls across multiple compliance frameworks
• Analyze, recommend, and implement security best practices
• Build risk registers, lead assessments, and monitor remediation progress
• Work hands-on with GRC tools and contribute to innovative solutions for complex challenges
• Translate technical and regulatory requirements into clear, actionable steps for clients

CMMC/NIST Consultant, Analyst

Business Development Representative

Business Development, Account Executive – Client Acquisition

Senior GRC Analyst

Entry Level GRC Analyst