ResponsibilitiesSupport implementation and maintenance of cybersecurity controls aligned with CMMC, NIST 800-171, and other applicable frameworksMonitor systems and environments for security events, vulnerabilities, and compliance gapsAssist in maintaining system security plans (SSP), policies, procedures, and supporting documentationAdminister user access controls, account provisioning/deprovisioning, and least privilege enforcementSupport endpoint and mobile device management (e.g., Microsoft Intune, MAM/MDM policies)Assist with incident response activities, including investigation, containment, and reportingConduct routine system audits, vulnerability scans, and remediation trackingEnsure secure configuration, patching, and hardening of systems and applicationsSupport implementation and monitoring of MFA, encryption, and data protection controlsCollaborate with IT and business units to ensure secure system integrations and operationsAssist with third-party/vendor security reviews and compliance requirementsSupport internal and external audits, assessments, and C3PAO readiness effortsSkills and Qualifications RequiredBachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience)3+ years of experience in system administration, cybersecurity, or compliance-focused IT rolesWorking knowledge of cybersecurity frameworks (CMMC, NIST 800-171, NIST 800-53)Experience with Microsoft 365 (GCC preferred), Azure AD, and endpoint management tools (Intune)Familiarity with vulnerability management, patching processes, and system hardeningUnderstanding of access control, authentication (MFA), and identity managementStrong attention to detail and compliance mindsetAbility to balance security requirements with operational needsEffective communication across technical and non-technical teamsProactive problem-solving and continuous improvement approach documentation and organizational skillsU.S. Preferred QualificationsExperience supporting CMMC Level 2 environments or similar regulated environmentsFamiliarity with tools such as Microsoft Defender, SIEM platforms, and compliance tools (e.g., IntelliGRC)Relevant certifications (Security+, CySA+, CISSP, or similar)Experience with audit preparation and evidence collectionPhysical RequirementsProlonged periods sitting at a desk and working on a computerMust be able to lift up to 30 pounds at times.