Compliance Manager

The Armor Group • Mason, OH

5h

About The Position

We are seeking a CMMC Compliance & Cybersecurity Manager to lead our organization’s readiness for certification under the U.S. Department of Defense Cybersecurity Maturity Model Certification (CMMC) framework. This role will be responsible for developing, implementing, and maintaining the policies, controls, and documentation required to achieve and sustain compliance—primarily aligned with NIST SP 800-171. The ideal candidate combines technical cybersecurity knowledge, audit/compliance experience, and strong project management skills to drive cross-functional execution.

Requirements

• Technical cybersecurity knowledge
• Audit/compliance experience
• Strong project management skills

Nice To Haves

• Bachelor's Degree, preferably in Cybersecurity, Information Technology or similar field
• Certified CMMC Professional (CCP)
• Certified CMMC Assessor (CCA)
• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• Other relevant cybersecurity or compliance certifications

Responsibilities

• Lead end-to-end CMMC readiness and certification efforts
• Interpret and implement CMMC requirements across the organization
• Serve as the primary internal owner of all CMMC-related activities
• Develop and maintain: System Security Plan (SSP)
• Develop and maintain: Policies, procedures, and control documentation
• Develop and maintain: Plans of Action & Milestones (POA&M)
• Map organizational controls to NIST SP 800-171 requirements
• Ensure audit-ready documentation and evidence collection
• Prepare for and support third-party assessments (C3PAO audits)
• Act as the primary liaison during audits
• Coordinate internal responses to audit findings
• Conduct gap assessments and risk analyses
• Prioritize and track remediation efforts
• Partner with IT and business units to implement required controls
• Collaborate with IT to ensure proper implementation of: Access controls (MFA, least privilege)
• Collaborate with IT to ensure proper implementation of: Endpoint and network security
• Collaborate with IT to ensure proper implementation of: Logging and monitoring
• Collaborate with IT to ensure proper implementation of: Data protection for Controlled Unclassified Information (CUI)

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Number of Employees: 1-10 employees