OSIbeyond

Compliance

• Lead end-to-end CMMC engagements (scoping → implementation → readiness)
• Define system boundaries and SSP scope
• Drive implementation of NIST 800-171 / CMMC Level 2 controls
• Develop SSP, POA&M, policies, and artifacts
• Prepare clients for C3PAO assessment
• Serve as primary compliance lead for client stakeholders
• Drive client accountability, timelines, and progress
• Manage multiple client environments within a CaaS model
• Escalate risks impacting readiness timelines
• Support post-certification compliance and monitoring
• Track compliance status, risks, and remediation
• Ensure ongoing alignment with CMMC requirements
• Deliver services using standardized frameworks and templates
• Ensure consistency across client environments
• Contribute to process improvement and automation
• Protect client and company data in accordance with security policies
• Ensure proper handling of CUI and regulated data
• Identify and report security incidents in accordance with procedures
• Support risk assessments and remediation tracking (POA&Ms)
• Participate in security program activities and reviews

CMMC Compliance Manager

• Assist in developing and customizing policies, procedures and other supporting documentation for clients
• Work closely with Compliance Managers and leadership to implement CMMC compliance requirements across several clients simultaneously
• Assist with client audits and assessments by providing documentation and evidence to third party auditors
• Review and validate client-provided evidence to ensure audit readiness and alignment with CMMC requirements
• Assist in reviewing configurations in Microsoft 365 GCC/GCC High and other platforms to confirm alignment with documentation
• Execute and track ongoing compliance activities to ensure continuous adherence to CMMC requirements post-assessment
• Assist with Project Management responsibilities including facilitating meetings, calls and supporting notes and activities
• Support delivery of OSIbeyond’s Compliance as a Service (CaaS) model, ensuring clients maintain continuous compliance rather than point-in-time certification
• Work within Microsoft 365 GCC / GCC High environments to validate secure configurations aligned with CMMC controls
• Other duties as assigned

Compliance Analyst

Support Engineer

• Resolve tier 1 level ticket requests supporting clients
• Provide high quality written and verbal customer service
• Accurately track and document all work
• Perform technical support services in line with technical skill requirements
• Meet all SLAs and participate in on-call rotation

CMMC Compliance Manager

Compliance Analyst

Technical Support Engineer