Compliance Consultant, CMMC
This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Compliance Consultant, CMMC in United States.
This role offers an exciting opportunity to lead and manage cybersecurity and compliance initiatives for federal and defense contractors. You will help organizations build mature Governance, Risk, and Compliance (GRC) programs, ensuring adherence to standards such as CMMC, DFARS, NIST, and export controls. The position requires close collaboration with internal teams, client stakeholders, and third-party providers to assess risk, define system scope, and implement effective security controls. You will serve as a trusted advisor, guiding clients through complex compliance requirements while influencing security best practices. The role combines hands-on technical expertise with strategic consulting, making it ideal for someone passionate about cybersecurity and regulatory frameworks in a dynamic, high-impact environment.
Accountabilities:
- Lead the development and management of GRC programs within client organizations, ensuring compliance with federal and defense standards
- Document data flows, define system scope, and assess current implementation of technical and non-technical security requirements
- Develop and maintain System Security Plans, policies, and procedures for clients
- Collaborate with client teams, internal professionals, and third-party vendors to deliver security documentation and compliance artifacts
- Provide advisory services on security and compliance, including value-based guidance for clients’ operational and technical improvements
- Support multiple client engagements, managing expectations, resources, and outcomes to achieve successful results
- Stay up-to-date on cybersecurity regulations, frameworks, and industry best practices to inform client recommendations
Requirements:
- 7+ years of hands-on experience implementing cybersecurity requirements for DoD contractors or federal systems (DFARS 252.204-7012, NIST SP 800-171, NIST SP 800-53, RMF)
- Subject matter expertise in CMMC assessment and certification requirements (Levels 1 & 2), DFARS, and NARA CUI program
- Experience with ITAR/EAR export control requirements
- Strong written and verbal communication skills to convey technical information effectively to diverse audiences
- High emotional intelligence and interpersonal skills, with experience collaborating across executive and operational levels
- Strong organizational skills and ability to prioritize workload under tight deadlines
- US Citizenship required; veterans preferred
- Professional certifications such as CCP, CCA, CISSP, CISM, or CISA are highly desirable
- Bachelor’s degree or higher in technology, engineering, or related field preferred
- Ability to travel occasionally (<10%) and obtain U.S. government security clearance if required
Benefits:
- Remote work opportunities with minimal travel requirements
- Competitive base salary with performance-based bonus structure
- Medical, dental, and vision insurance coverage
- Four weeks of paid time off plus holidays
- Paid maternity and paternity leave
- Two days of paid volunteer time
- 401(k) plan with 4% company match
- Tuition reimbursement and professional development support
- Employer-sponsored disability and life insurance
- Collaborative, mission-driven, and award-winning company culture
