CMMC Compliance Officer

Avantor

. Develop and maintain information security policies, standards, and procedures required for CMMC/NIST compliance .

Posted 11/10/2026full-timeRemote • California • United StatesMid-LevelSenior💰 $86,000 - $138,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining information security policies and procedures for CMMC/NIST compliance, alongside strong project management and risk assessment capabilities. Proficient in cybersecurity risk management strategies and audit preparation, with a focus on continuous monitoring and incident response.

Highest-signal resume keywords

CMMC/NIST ComplianceRisk ManagementProject ManagementAudit PreparationInformation Security Policy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk AssessmentCybersecurityPolicy DevelopmentContinuous MonitoringNIST SP 800-171CMMC 2.0POA&M ManagementSystem Security DocumentationData Protection Requirements

Soft Skills

Problem SolvingCommunicationInterpersonal SkillsAnalytical SkillsTeam Collaboration

Tools & Technologies

Microsoft SuiteMS Project

Certifications & Qualifications

CCPCISACompTIA Security+

Industry Keywords

C3PAOITAREARCUIFCINISPOMDFARSSecurity ClearanceRisk AcceptanceEvidence Repositories

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop and maintain information security policies, standards, and procedures required for CMMC/NIST compliance
Track and manage CMMC security posture in compliance with applicable standards
Oversee implementation and maintenance of CMMC/NIST security controls in collaboration with ISSM/ISSO
Conduct regular risk assessments and gap analyses to identify vulnerabilities, threats, and potential impacts
Develop and actively manage POA&Ms to address information security gaps
Track remediation progress and ensure compliant resolution of security issues
Develop and implement cybersecurity risk management strategies
Maintain and periodically review Risk Acceptance/Exceptions in coordination with ISSM/ISSO
Liaise with C3PAOs during external CMMC audits and support audit preparation
Support continuous monitoring programs to detect and respond to security incidents
Ensure timely reporting and resolution of security incidents
Promote information security awareness and compliance across the organization
Monitor security training and awareness programs for employees, contractors, and vendors
Provide guidance on classification markings for ITAR, EAR, CUI, FCI, and classified data
Perform other duties as assigned
Report to the Information Systems Security Manager
Remotely support NuSil California- and Texas-based operations

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, or Information Technology with six years of Information Security or related experience, or a master’s degree with three years of relevant security experience
CCP, CISA, and CompTIA Security+ preferred
Strong skills in project management, problem solving, and value creation
Proficiency in Microsoft Suite and MS Project
Experience in architectural projects and execution
Must be a U.S. citizen
Must be able to obtain and maintain an Active U.S. Government security clearance
Demonstrated understanding of secure information system design, implementation, and maintenance
Strong knowledge of policy development and enforcement, continuous monitoring, and risk management/assessment practices
Excellent verbal and written communication and strong interpersonal skills
Extensive experience with NIST SP 800-171 and CMMC 2.0 requirements preferred
Extensive experience with audit preparation and oversight, including coordination with C3PAOs preferred
Extensive experience maintaining evidence repositories preferred
Extensive experience with SSP, Operational Plans of Action, and POA&M management preferred
Strong knowledge of continuous monitoring and risk management/assessment practices, including mock audits preferred
Experience evaluating, developing, and revising system security documentation, cybersecurity policies, and operational procedures preferred
Extensive experience with FCI and CUI data protection requirements preferred
Ability to obtain and maintain Special Access Program approval within a reasonable period of time
Understanding and working knowledge of NISPOM and DFARS
Excellent analytical, problem-solving, and communication skills
Ability to work independently and as part of a team
Ability to adapt to a fast-paced and challenging work environment
Demonstrated positive working relationships with internal and external customers
Ability to follow projects through to completion
Ability to remain flexible to meet changing priorities and deadlines

Benefits

Comp & perks

Medical coverage
Dental coverage
Vision coverage
Wellness programs
Health savings accounts
Flexible spending accounts
401(k) plan with company match
Employee stock purchase program
11 paid holidays
18 PTO days annually
Volunteer time off
6 weeks of 100% paid parental leave (except in states that offer paid family leave)
Learning experiences to support career growth and success
Remote work arrangement