CMMC Compliance Manager

PCL Construction•Arvada, CO

7d•$127,000 - $174,500•Onsite

About The Position

At PCL Construction Enterprises, Inc., part of the PCL Family of Companies (PCL), we don’t just build projects—we build opportunities, careers and communities. We are 100% employee-owned, every employee has a stake in our success, and that shared commitment drives how we work, grow and lead in the construction industry. We’re a team of builders who care deeply about what we create and who we build it with. That includes you. We are not only investing in what’s next in construction, we are investing in what’s next for your career. We are seeking to hire a CMMC Compliance Manager for our U.S. Head Office located in Denver, CO. Reporting to the President & COO, U.S. Operations and Assistant General Counsel, you will work closely with the Sr. Manager, Cybersecurity and Networking Business Technology and the Government Contract Compliance Officer. The CMMC Compliance Manager will be responsible for supporting the company’s U.S. government cybersecurity compliance program, with primary focus on Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171 compliance, DFARS cyber requirements, and related contractual safeguarding obligations. This role helps coordinate the governance, documentation, readiness, and ongoing compliance activities required to support eligibility for U.S. government contract performance.

Requirements

Bachelor’s degree in cybersecurity, information systems, business, legal studies, government contracting, compliance, or related field preferred.
Minimum 3–7 years of experience in government contract compliance, cybersecurity compliance, IT governance, audit support, risk management, or related work.
Experience supporting U.S. government contract requirements strongly preferred.
Working knowledge of CMMC, NIST SP 800-171, DFARS cyber clauses, FAR safeguarding requirements, and Controlled Unclassified Information requirements preferred.
Experience coordinating compliance documentation, assessments, evidence collection, or audit support strongly preferred.
Familiarity with policy/procedure management, issue tracking, database development and corrective action follow-up.
Experience working across legal/compliance, IT, contracts, operations, and business stakeholders preferred.
Demonstrated ability to work as member of a team and trusted client advisor.
Ability to establish and maintain good rapport with executives, district office management and other internal clients.

Responsibilities

Manages the company’s CMMC compliance and government cybersecurity program across the PCL’s U.S.-based operations, with accountability for readiness, assessment preparation, and ongoing compliance.
Establishes, maintains, and enforces the cybersecurity compliance framework, including policies, procedures, standards, workflows, control ownership models, system security plans, POA&Ms, compliance matrices, evidence inventories, and readiness trackers across the U.S.
Owns implementation and sustainment of NIST SP 800-171, CMMC, DFARS/FAR safeguarding requirements, and related CUI handling obligations across applicable U.S. government contract work.
Leads day-to-day cross-functional execution of required technical and administrative controls, coordinating with business technology, information technology, cybersecurity, legal/compliance, contracts, operations, and other stakeholders to drive delivery, timelines, evidence collection, and issue resolution.
Owns CMMC readiness and assessment preparation, including boundary definition, control narratives, inheritance strategy, evidence organization, assessment support files, and engagement with assessors, customers, and external auditors.
Monitors cybersecurity requirements in solicitations, contracts, modifications, and flow-down provisions, including DFARS 252.204-7012, 252.204-7019, 252.204-7020, 252.204-7021, FAR 52.204-21, and related safeguarding clauses.
Coordinates subcontractor and supplier compliance activities where cybersecurity clauses, safeguarding requirements, or CUI handling obligations apply.
Tracks remediation items, follow-up actions, milestone dates, and compliance gaps to closure, and maintains audit-ready records in designated repositories in accordance with company governance requirements.
Supports incident reporting workflows, escalation paths, and documentation related to government cybersecurity reporting obligations.
Develops and administers role-based training and awareness for CMMC, CUI handling, safeguarding obligations, and project-level compliance execution.
Prepares recurring status reports, dashboards, metrics, and executive summaries regarding cybersecurity compliance posture, readiness, and program progress.
Participates in internal working groups and stays current on changes to government cybersecurity requirements, assessing impacts and communicating updates to internal stakeholders.

Benefits

Employee ownership opportunities that build long-term value
Annual discretionary performance bonuses
401(k) with company match
Industry-leading medical, dental and vision benefits
Prescription drug coverage and telemedicine services
Life, AD&D and disability insurance
Paid parental leave and family care support
HSA or FSA for healthcare, dependent care and transportation
Mental health and wellness support, including Employee Assistance Programs
Career growth pathways, leadership development and mentorship programs
Access to world-class training through PCL’s College of Construction and professional development courses
Ongoing opportunities to learn new skills, explore different roles and grow your career across sectors and regions