CMMC Compliance Manager

🔥 9 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Beryllium InfoSec

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2018

🔒 Cybersecurity

📋 Compliance

🎖️ Defense

💰 GROWTH EQUITY VC on 2023-01

Cybersecurity • Compliance • Defense

Beryllium InfoSec is an information security firm that helps Department of Defense (DoD) and federal contractors achieve and maintain cybersecurity compliance. The company specializes in meeting regulatory frameworks and requirements such as DFARS 252. 204-7012, CMMC, NIST SP 800-171 and NIST SP 800-53, and offers services including gap analysis, compliance reviews and readiness assessments, compliance program management, data flow analysis, evidence gathering and audit preparation. Beryllium also provides a managed, FedRAMP Moderate Equivalent virtual desktop enclave product called Cuick Trac to simplify CMMC Level 2 certification for contractors. The firm produces compliance guides, articles, webinars and offers consultations; it has specialized in DoD cybersecurity compliance since 2017 and is located in Dallas, TX.

📋 Description

• Guide Cuick Trac® clients through implementing and maintaining customer-responsible controls • Prepare and support clients through C3PAO, DCMA DIBCAC Medium, and DCMA DIBCAC High assessments • Translate the Customer Responsibility Matrix into practical client action plans • Create and validate client-specific inheritance and responsibility documentation • Provide remediation guidance for NIST SP 800-171 and CMMC Level 2 requirements • Develop boundary, scoping, data-flow, user-flow, and data-management documentation • Advise on incident response plans, tabletop exercises, physical security remediation, policies, and procedures • Perform gap assessments, risk assessments, and implementation reviews against NIST SP 800-171A objectives • Develop and maintain SSPs and POA&Ms, including tracking POA&M closeout • Advise clients on CMMC status entries and annual affirmations in SPRS • Assemble evidence packages and coach client personnel for assessor interviews and demonstrations • Support clients during assessments and guide remediation of findings • Conduct annual compliance reviews • Review government contracts and solicitations for cybersecurity, CUI, and export-control requirements • Build and manage compliance roadmaps • Administer the GRC tool for assigned clients • Perform other duties as assigned based on business needs

🎯 Requirements

• 2–4 years of customer-facing experience with NIST SP 800-171, NIST SP 800-53, CMMC, and the NIST Risk Management Framework • Working knowledge of DoD cybersecurity clauses, including DFARS 252.204-7012, DFARS 252.204-7021, provision 252.204-7025, DFARS 252.240-7997, and FAR 52.240-93 • Awareness that legacy contracts may still cite 252.204-7019 and 252.204-7020 • Familiarity with the CMMC program rule (32 CFR Part 170), including scoping, POA&M, and affirmation requirements • Experience with firewalls, SIEM, vulnerability management, MFA, endpoint protection, DLP, and other security tools • Experience with risk and security assessment processes, and tracking and remediating audit or assessment findings • POA&M management • Knowledge of DoD cybersecurity policy, governance best practices, and emerging trends • Working knowledge of operating systems, security applications, basic network protocols, tools, and infrastructure • Strong written and verbal communication skills • Strong project management skills and ability to manage multiple client engagements concurrently • Consultative client management skills • Teaching and coaching skills • Exceptional attention to detail • Proficiency with Microsoft Office / Microsoft 365 • Candidates must meet applicable U.S. person requirements under relevant export-control regulations • Preferred: incident response planning and tabletop exercises • Preferred: familiarity with NIST SP 800-171 Revision 3, the FAR CUI rule, and CIRCIA • Preferred certifications include CCP, CCA, RP/RPA, CISSP, CISM, CISA, ISO/IEC 27001 Lead Auditor, and Microsoft Azure certifications

🏖️ Benefits

• Remote position • Occasional travel may be required

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume