CMMC Compliance Specialist

Role Overview

• Serve as the designated compliance advisor for assigned client organizations.
• Interpret and apply: NIST SP 800-171, DFARS 252.204-7012, CMMC 2.0 Level 1 & Level 2 requirements, SPRS scoring and submissions.
• Guide clients through gap assessments, remediation planning, implementation, and certification readiness.
• Assist clients with developing and maintaining: System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), Security policies and procedures, Compliance documentation and evidence.
• Conduct recurring compliance strategy meetings with clients.
• Review implementation progress and validate remediation efforts.
• Serve as the primary compliance contact throughout the client engagement.
• Translate complex regulatory requirements into practical business and technical recommendations.
• Collaborate with client leadership, IT teams, and security personnel to implement compliant solutions.
• Support clients before, during, and after assessments.
• Prepare professional assessment reports and executive summaries.
• Maintain accurate compliance documentation and audit evidence.
• Track compliance milestones and client deliverables.
• Conduct monthly compliance reviews.
• Monitor regulatory updates affecting Department of Defense contractors.
• Assist clients with annual self-assessments and SPRS submissions.
• Support audit readiness initiatives.
• Coordinate with C3PAOs, government auditors, and other stakeholders as necessary.
• Deliver cybersecurity awareness and compliance training for client personnel.
• Educate organizations on evolving CMMC and NIST requirements.
• Help clients understand how cybersecurity controls support their business operations.

Requirements

• Current CMMC Certified Practitioner (CP) certification or higher
• Ability to obtain CMMC CCP or CCA within 90 days if not already certified
• 3+ years of experience in cybersecurity, information assurance, risk management, or compliance
• Experience working with: NIST SP 800-171, DFARS 252.204-7012, CMMC
• Experience supporting Department of Defense contractors or federal compliance programs
• Strong written and verbal communication skills
• Ability to manage multiple client engagements simultaneously
• Excellent organizational and project management skills
• Preferred Qualifications: CMMC CCP (OK If In Progress), CMMC CCA (OK If In Progress), Security+
• Experience working within a Managed Service Provider (MSP)
• Experience serving as a vCISO or virtual Compliance Officer
• Experience with vulnerability assessments, risk assessments, and security audits
• Understanding of federal contracting regulations and Controlled Unclassified Information (CUI)
• Familiarity with common compliance tracking platforms, ticketing systems, and remote collaboration tools

Tech Stack

• Cyber Security

Benefits

• Competitive salary
• Comprehensive medical, dental, and vision insurance
• Company-paid Life Insurance
• Company-paid Short-Term & Long-Term Disability
• SIMPLE IRA retirement plan with company match
• 128 hours of Paid Time Off
• Paid industry certifications and continuing education
• Professional development assistance
• Referral bonus program
• Legal services benefit
• Performance bonus opportunities
• Free office snacks
• Outstanding team culture
• Opportunity for long-term career advancement within one of the nation's premier defense cybersecurity organizations