Compliance Analyst/Internal Auditor

NMR Consulting

. Plan and execute internal audits against CMMC Level 2, NIST 800-171, ISO 9001, ISO 20000, ISO 27001, and CMMI Development and Services models .

Posted 9/18/2026full-timeHuntsville • Alabama • United StatesMid-LevelSenior💰 $100,000 - $115,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in internal auditing and compliance management, with a strong focus on CMMC, NIST, ISO standards, and quality assurance. Capable of developing and implementing corrective action plans while effectively communicating complex regulatory requirements.

Highest-signal resume keywords

CMMC Compliance ManagementNIST SP 800-171 ImplementationISO 9001, ISO 20000, ISO 27001 KnowledgeSecurity+ CertificationTechnical Writing and Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Internal AuditingCompliance ManagementQuality AssuranceCorrective Action PlanningPolicy DevelopmentOperational Workflow MappingCybersecurity ControlsData Protection RequirementsSupply Chain Risk ManagementContract Review

Soft Skills

Interpersonal SkillsEffective CommunicationTeam CollaborationTraining and Presentation Skills

Tools & Technologies

Quality Management SystemsDocumentation Management Systems

Certifications & Qualifications

Security+ Certification

Industry Keywords

CMMC Level 2NIST 800-171ISO 9001ISO 20000ISO 27001CMMI DevelopmentCMMI ServicesRegulatory ComplianceQuality ManagementAudit Activities

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Plan and execute internal audits against CMMC Level 2, NIST 800-171, ISO 9001, ISO 20000, ISO 27001, and CMMI Development and Services models
Identify operational, quality, and security gaps relative to contractual and regulatory obligations
Develop, coordinate, and monitor corrective action plans and verify closure of audit findings
Write, revise, and standardize internal policies, processes, and standard operating procedures
Maintain the master documentation library and ensure teams use approved, current versions
Map client and contract requirements to corporate policies, controls, and operational workflows
Review contracts for regulatory, quality, and cybersecurity requirements
Serve as primary liaison for external auditors, registrars, and government assessors
Gather, organize, validate, and present certification and assessment evidence
Operate, maintain, and improve the corporate quality management program and related systems
Prepare and deliver briefings and participate in quality-management meetings
Provide quality and compliance training to headquarters staff and participate in tabletop exercises
Research developing standards and regulations and advise leadership on system changes and emerging obligations
Provide objective review of IT operations supporting cybersecurity compliance and control effectiveness
Coordinate compliance and audit activities with managed service providers
Coordinate recurring surveillance and certification audits, including annual ISO activities
Maintain knowledge of relevant standards, regulations, contractual requirements, and industry practices
Perform other duties supporting corporate compliance, quality, and operational priorities

Requirements

What you’ll need

Bachelor's degree in information technology, cybersecurity, business administration, or a related field
3-5+ years of experience in internal auditing, compliance management, quality assurance, or a closely related function
Demonstrated experience supporting or managing CMMC or NIST SP 800-171, ISO 9001, ISO 20000, or ISO 27001, and CMMI implementations
Security+ certification
Strong understanding of IT systems and processes, cybersecurity controls, data protection requirements, and supply chain risk management
Exceptional technical writing and communication skills, including the ability to translate complex regulations into clear, practical guidance
Ability to obtain and maintain a U.S. government-issued security clearance
Strong interpersonal skills and ability to work effectively with corporate teams, technical personnel, service providers, customers, and external assessors
Ability to travel occasionally based on business and audit requirements

Benefits

Comp & perks

Hybrid work arrangement
Occasional business travel