CMMC Compliance Specialist – Part-Time

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏱ Part Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon Industries, Limited

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1996

💼 Consulting

☁️ SaaS

🔒 Cybersecurity

Consulting • SaaS • Cybersecurity

Horizon Industries, Limited is an IT services and management consulting corporation that delivers a full life-cycle of support through business strategy analysis, business system development and deployment, and operational support. The company focuses on digital transformation capabilities by leveraging expertise in Robotic Process Automation (RPA) and Artificial Intelligence (AI), offering tailored solutions to meet the unique needs of its clients. Horizon Industries is committed to quality, using established management principles like CMMI and ISO, and provides services including IT support, program management, and cybersecurity solutions across the U. S. and internationally.

📋 Description

• Serve as Horizon's designated expert for all CMMC-related activities • Act as executive owner of systems that process, store, or transmit Controlled Unclassified Information (CUI) • Align cybersecurity initiatives with business objectives, contract requirements, and federal regulations • Provide strategic technology guidance to executive leadership regarding compliance, security, and risk management • Participate in executive compliance reviews, readiness briefings, assessor interviews, and executive-level audit discussions • Support annual affirmations and executive attestations relating to CMMC certification readiness • Provide executive oversight of Horizon's CMMC Level 2 program • Review and approve CMMC policies, procedures, plans, compliance artifacts, and major documentation • Ensure alignment among the SSP, CUI Management Plan, POA&M, Risk Register, and supporting evidence repositories • Review compliance metrics, remediation activities, and audit findings • Support self-assessments, mock assessments, formal C3PAO assessments, and internal audit preparations • Provide oversight of Microsoft GCC High, Entra ID/IAM, Conditional Access and MFA, endpoint security, device management, monitoring, incident response, vulnerability management, and configuration/change management • Review security architecture and evaluate impacts of major technology changes on CMMC scope and security posture • Lead annual and periodic cybersecurity risk assessments • Review risk treatment decisions and approve risk acceptance recommendations • Manage corrective actions, remediation plans, POA&M development, and closure activities • Monitor compliance risks affecting certification status and federal contract eligibility • Conduct periodic readiness reviews and executive quality checks on compliance artifacts • Conduct monthly compliance governance reviews and provide quarterly executive risk assessments • Validate SSP accuracy and compliance traceability • Advise leadership on cybersecurity investments, risk acceptance, and CMMC sustainment strategies

🎯 Requirements

• Demonstrated experience supporting CMMC Level 2 or NIST SP 800-171 compliance programs • Experience operating within DoD, federal contractor, or defense-industrial-base environments • Strong working knowledge of Microsoft 365 GCC High • Strong working knowledge of Entra ID • Strong working knowledge of Microsoft Defender • Strong working knowledge of Microsoft Purview • Strong working knowledge of Microsoft Sentinel • Strong working knowledge of Intune • Strong working knowledge of Identity and Access Management • Preferred: Previous experience serving as CIO, CISO, or equivalent executive role • Preferred: Successfully supported one or more organizations through CMMC certification • Preferred: Experience participating in DoD cybersecurity assessments • Preferred: Familiarity with DFARS 252.204-7012, 7019, 7020, and 7021 • Preferred: Experience with SPRS submissions and executive affirmations • Preferred certifications: CISSP, CISM, CGRC (formerly CAP), CCSP, CMMC Certified Professional (CCP), or CMMC Certified Assessor (CCA)

🏖️ Benefits

• Part-time consulting arrangement • Approximately 30–60 hours per month • Equal Employment Opportunity employer • Consideration without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin • EOE/Vet/Disabled