Compliance Lead - CMMC (NIST SP 800-171)
Core
Customer-facing lead for CMMC Level 1 and Level 2 engagements, owning NIST SP 800-171 interpretation, scoping, documentation, and assessment readiness from kickoff through C3PAO assessment and sustainment.
Role type
Senior IC compliance lead (CMMC/NIST SP 800-171)
Builds
Assessor-ready System Security Plans, policies, evidence libraries, and technical control implementations for defense contractors.
Domain
Defense contracting / Cybersecurity compliance (CMMC)
Required skills
CMMC Level 1/2 scoping and boundary definition, NIST SP 800-171 interpretation, System Security Plan (SSP) authoring, POA&M management, Microsoft 365 GCC High administration (Entra ID, Intune, Purview), Google Workspace administration (Cloud Identity, DLP), endpoint management (Windows/macOS via Intune/Jamf), SIEM operations (Sentinel/Splunk), vulnerability scanning, C3PAO assessment preparation.
Preferred skills
CMMC Certified Assessor (CCA) or Certified Professional (CCP), GCC High migrations, Apple Business Manager/Android Enterprise, FedRAMP Moderate equivalency evaluation, hybrid cloud enclave design.
Technologies
Microsoft Entra ID, Microsoft Intune, Microsoft Purview, Microsoft Sentinel, Google Cloud Identity, Google Workspace DLP, Jamf, Splunk, BitLocker, FileVault, FIPS-validated encryption.
Responsibilities
Scope CMMC assessment boundaries and produce data-flow diagrams; author SSPs and supporting documentation; implement technical controls hands-on in customer tenants; manage endpoint management and hardening baselines; operate logging and monitoring stacks; assess environments against CMMC Level 2 Guide; prepare and support customers during C3PAO assessments; run sustainment monitoring and annual affirmations.
Seniority
Senior, hands-on IC
