CMMC Compliance Specialist
About The Position
Join One of the Nation's Leaders in Defense Contractor Cybersecurity Since opening in 2003, On Call Computer Solutions has become a nationwide leader in cybersecurity, compliance, and managed IT services for Department of Defense contractors. We help organizations across the United States successfully meet the stringent cybersecurity requirements of DFARS, NIST SP 800-171, CMMC 2.0, and related federal regulations. Are you looking to continue your career as a Compliance Specialist where you can make a meaningful impact by helping organizations protect Controlled Unclassified Information (CUI) and achieve regulatory compliance? Would you like to join an award-winning nationwide team that consistently delivers exceptional customer satisfaction while working alongside some of the industry's most experienced cybersecurity professionals? Do you want access to industry-leading tools, paid certifications, ongoing professional development, and a collaborative team committed to technical excellence? If you're looking for a long-term career with a rapidly growing cybersecurity company where your expertise matters and your career can continue to grow, we'd love to meet you. Position Overview We are seeking a highly qualified CMMC Compliance Specialist to serve as a trusted compliance advisor for Department of Defense contractors. In this role, you will function as a virtual Compliance Officer for assigned clients, helping them build, maintain, and continuously improve their cybersecurity compliance programs. You will guide organizations through every phase of the compliance lifecycle—from initial gap assessments and remediation planning to audit readiness and ongoing compliance management—while providing strategic guidance on CMMC, NIST SP 800-171, DFARS, and related federal cybersecurity requirements.
Requirements
- Current CMMC Certified Practitioner (CP) certification or higher
- Ability to obtain CMMC CCP or CCA within 90 days if not already certified
- 3+ years of experience in cybersecurity, information assurance, risk management, or compliance
- Experience working with: NIST SP 800-171, DFARS 252.204-7012, CMMC
- Experience supporting Department of Defense contractors or federal compliance programs
- Strong written and verbal communication skills
- Ability to manage multiple client engagements simultaneously
- Excellent organizational and project management skills
- Successful candidates should possess strong knowledge of: NIST SP 800-171, CMMC 2.0, DFARS cybersecurity requirements, Risk Management Frameworks, Security policies and governance, Security documentation, Risk assessments, Cybersecurity best practices
Nice To Haves
- CMMC CCP (OK If In Progress)
- CMMC CCA (OK If In Progress)
- Security+
- Experience working within a Managed Service Provider (MSP)
- Experience serving as a vCISO or virtual Compliance Officer
- Experience with vulnerability assessments, risk assessments, and security audits
- Understanding of federal contracting regulations and Controlled Unclassified Information (CUI)
- Familiarity with common compliance tracking platforms, ticketing systems, and remote collaboration tools
- Microsoft Government Cloud (GCC/GCC High) environments
Responsibilities
- Serve as the designated compliance advisor for assigned client organizations.
- Interpret and apply: NIST SP 800-171, DFARS 252.204-7012, CMMC 2.0 Level 1 & Level 2 requirements, SPRS scoring and submissions
- Guide clients through gap assessments, remediation planning, implementation, and certification readiness.
- Assist clients with developing and maintaining: System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), Security policies and procedures, Compliance documentation and evidence
- Conduct recurring compliance strategy meetings with clients.
- Review implementation progress and validate remediation efforts.
- Serve as the primary compliance contact throughout the client engagement.
- Translate complex regulatory requirements into practical business and technical recommendations.
- Collaborate with client leadership, IT teams, and security personnel to implement compliant solutions.
- Support clients before, during, and after assessments.
- Prepare professional assessment reports and executive summaries.
- Maintain accurate compliance documentation and audit evidence.
- Track compliance milestones and client deliverables.
- Ensure documentation aligns with federal requirements and industry best practices.
- Deliver cybersecurity awareness and compliance training for client personnel.
- Educate organizations on evolving CMMC and NIST requirements.
- Help clients understand how cybersecurity controls support their business operations.
- Conduct monthly compliance reviews.
- Monitor regulatory updates affecting Department of Defense contractors.
- Assist clients with annual self-assessments and SPRS submissions.
- Support audit readiness initiatives.
- Coordinate with C3PAOs, government auditors, and other stakeholders as necessary.
Benefits
- Competitive salary
- Comprehensive medical, dental, and vision insurance
- Company-paid Life Insurance
- Company-paid Short-Term & Long-Term Disability
- SIMPLE IRA retirement plan with company match
- 128 hours of Paid Time Off
- Paid industry certifications and continuing education
- Professional development assistance
- Referral bonus program
- Legal services benefit
- Performance bonus opportunities
- Free office snacks
- Outstanding team culture
- Opportunity for long-term career advancement within one of the nation's premier defense cybersecurity organizations
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
