Compliance Lead - CMMC (NIST SP 800-171)

Role overview Lead customer engagements to prepare organizations for CMMC Level 1 and Level 2 compliance, from scoping and control implementation through assessment and ongoing readiness. The work combines direct customer guidance, technical configuration, evidence development, and assessor preparation across varied cloud, endpoint, and on-premises environments.

Responsibilities - Serve as the primary customer contact, leading kickoff and working sessions, reporting progress, and answering CMMC and NIST SP 800-171 questions. - Define assessment boundaries by tracing sensitive information flows, categorizing assets, and producing boundary, data-flow, and network diagrams. - Create and maintain System Security Plans, policies, procedures, Plans of Action and Milestones, evidence libraries, and assessment records. - Configure security controls for identity, access, data protection, encryption, and endpoint management across customer environments. - Build logging, alerting, vulnerability management, backup, and recovery practices; assess the environment against CMMC Level 2 objectives and close readiness gaps. - Prepare customers for independent assessments, support them during assessment week, and guide sustainment and reassessment readiness.

Requirements - Hands-on experience leading defense contractors through NIST SP 800-171 or CMMC Level 2 from scoping through assessment. - Ability to interpret requirements, implement technical controls, document evidence, and evaluate results from an assessor’s perspective. - Versatility across environments that may include Windows and macOS, cloud and on-premises systems, and endpoint management platforms. - Strong customer communication and engagement leadership skills.

Nice to have Experience with endpoint security and management, Microsoft or Google security platforms, CIS Benchmarks or DISA STIGs, and CUI enclave design or migration is relevant. The source also describes work with tools such as Intune, Jamf, Microsoft Purview, Sentinel, and Google SecOps.

Benefits and work setup The role is remote within the United States, with an estimated 10–25% travel for customer work and assessments. Listed benefits include medical, dental, and vision premiums paid by the employer, HSA, retirement plan, stock options, home office budget, flexible time off, federal holidays, paid parental leave, and learning and conference reimbursement. The posted salary range is $123,250–$166,750 USD.