FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
CMMC Compliance Manager
Beryllium InfoSec. Guide Cuick Trac® clients through implementing and maintaining customer-responsible controls .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in NIST SP 800-171, CMMC compliance, and risk management frameworks, with a strong focus on client engagement and remediation strategies. Proficient in developing compliance documentation, conducting assessments, and advising on cybersecurity policies and procedures.
Highest-signal resume keywords
NIST SP 800-171 ComplianceCMMC Assessment ExperienceRisk Assessment ProcessesClient Management SkillsProject Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
NIST SP 800-53CMMCRisk Management FrameworkPOA&M ManagementIncident Response PlanningCybersecurity AssessmentData Management DocumentationCompliance Roadmap DevelopmentSecurity Assessment ProcessesVulnerability Management
Soft Skills
Strong Written CommunicationStrong Verbal CommunicationConsultative Client ManagementTeaching SkillsAttention to Detail
Tools & Technologies
Microsoft OfficeMicrosoft 365GRC ToolSIEMMFADLPFirewallsEndpoint ProtectionBasic Network ProtocolsSecurity Applications
Certifications & Qualifications
CISSPCISMCISAISO/IEC 27001 Lead AuditorCCPCCARP/RPAMicrosoft Azure Certifications
Industry Keywords
DoD Cybersecurity ClausesDFARSFARCUIExport-Control RegulationsCompliance ReviewsGovernment ContractsCybersecurity PoliciesEmerging TrendsTabletop Exercises
Tech Stack
Tools & technologiesAzureCyber SecurityFirewallsRPA
About the role
Key responsibilities & impact- Guide Cuick Trac® clients through implementing and maintaining customer-responsible controls
- Prepare and support clients through C3PAO, DCMA DIBCAC Medium, and DCMA DIBCAC High assessments
- Translate the Customer Responsibility Matrix into practical client action plans
- Create and validate client-specific inheritance and responsibility documentation
- Provide remediation guidance for NIST SP 800-171 and CMMC Level 2 requirements
- Develop boundary, scoping, data-flow, user-flow, and data-management documentation
- Advise on incident response plans, tabletop exercises, physical security remediation, policies, and procedures
- Perform gap assessments, risk assessments, and implementation reviews against NIST SP 800-171A objectives
- Develop and maintain SSPs and POA&Ms, including tracking POA&M closeout
- Advise clients on CMMC status entries and annual affirmations in SPRS
- Assemble evidence packages and coach client personnel for assessor interviews and demonstrations
- Support clients during assessments and guide remediation of findings
- Conduct annual compliance reviews
- Review government contracts and solicitations for cybersecurity, CUI, and export-control requirements
- Build and manage compliance roadmaps
- Administer the GRC tool for assigned clients
- Perform other duties as assigned based on business needs
Requirements
What you’ll need- 2–4 years of customer-facing experience with NIST SP 800-171, NIST SP 800-53, CMMC, and the NIST Risk Management Framework
- Working knowledge of DoD cybersecurity clauses, including DFARS 252.204-7012, DFARS 252.204-7021, provision 252.204-7025, DFARS 252.240-7997, and FAR 52.240-93
- Awareness that legacy contracts may still cite 252.204-7019 and 252.204-7020
- Familiarity with the CMMC program rule (32 CFR Part 170), including scoping, POA&M, and affirmation requirements
- Experience with firewalls, SIEM, vulnerability management, MFA, endpoint protection, DLP, and other security tools
- Experience with risk and security assessment processes, and tracking and remediating audit or assessment findings
- POA&M management
- Knowledge of DoD cybersecurity policy, governance best practices, and emerging trends
- Working knowledge of operating systems, security applications, basic network protocols, tools, and infrastructure
- Strong written and verbal communication skills
- Strong project management skills and ability to manage multiple client engagements concurrently
- Consultative client management skills
- Teaching and coaching skills
- Exceptional attention to detail
- Proficiency with Microsoft Office / Microsoft 365
- Candidates must meet applicable U.S. person requirements under relevant export-control regulations
- Preferred: incident response planning and tabletop exercises
- Preferred: familiarity with NIST SP 800-171 Revision 3, the FAR CUI rule, and CIRCIA
- Preferred certifications include CCP, CCA, RP/RPA, CISSP, CISM, CISA, ISO/IEC 27001 Lead Auditor, and Microsoft Azure certifications
Benefits
Comp & perks- Remote position
- Occasional travel may be required