Compliance Architect

Summit 7 Systems•Remote, AL

23d

About The Position

The Compliance Architect serves as a client-facing CMMC advisor and internal escalation resource for complex compliance and business matters. The role conducts strategic compliance reviews early in a client's CMMC Level 2 journey, capturing the current state, desired future state, and a strategic roadmap for successful program implementation. The architect works with executive sponsors and key stakeholders to align business objectives, regulatory requirements, technical constraints, and expectations. The role identifies potential risks, validates high-level scoping assumptions, assesses organizational readiness and dependencies, and delivers an actionable roadmap to support client outcomes and effective internal delivery. The position also supports client escalations, complex compliance discussions, and pre-sales activities; develops internal guidance and training materials; maintains subject matter expertise and communication with compliance regulators and industry leaders; and contributes to improvements in compliance delivery, client experience, and internal enablement.

Requirements

Bachelor's degree in Information Security, Information Technology, Risk Management, or Business, or equivalent practical experience.
Certified CMMC Assessor.
Active CISSP in good standing, or an equivalent DoD-approved IAM or IAT Level II or Level III certification under DoD 8140/8570 guidance.
At least 10 years of progressive experience in cybersecurity, compliance, or risk management, including at least 5 years supporting or performing DoD-aligned compliance efforts such as CMMC or NIST SP 800-171 in assessment and strategic advisory roles.
Experience advising executive leadership on compliance, cybersecurity risk, and regulatory strategy.
Experience within organizations operating under multiple or overlapping governance, regulatory, or contractual requirements.
Experience supporting organizations across diverse industries, such as professional services, engineering, aerospace, manufacturing, and construction.
Excellent verbal and written communication skills, with the ability to communicate effectively at all organizational levels.
Strong understanding of Summit 7 MSP/MSSP service offerings and broad familiarity with enterprise IT architectures, including on-premises and cloud environments such as Microsoft 365 and Azure.
Proficiency with Microsoft Office productivity and collaboration tools.

Nice To Haves

Additional cybersecurity, compliance, risk, or audit certifications, such as CCSP, CRISC, or CISA.

Responsibilities

Lead strategic discovery and advisory engagements with clients and key stakeholders.
Elicit and document immediate and long-term goals from operational and executive perspectives, ensuring alignment with CMMC requirements and business objectives.
Validate high-level CMMC scoping assumptions, organizational boundaries, external dependencies, additional governance or compliance obligations, and inherited or shared control providers.
Identify potential risk areas early, including operational technology, planned architectural changes, manufacturing systems, printed materials, specialized equipment, and parent-organization constraints.
Assess client readiness, resourcing, governance, and expectations for meeting compliance goals.
Develop a strategic compliance roadmap outlining the current state, desired future state, key risks, and recommended paths forward.
Provide clear strategic recommendations to internal teams conducting next steps.
Serve as a senior compliance consultant supporting client escalations, complex compliance discussions, and pre-sales activities as requested.
Develop internal FAQs, guidance materials, and training content tailored to Summit 7 clients and service offerings as priorities permit.
Maintain subject matter expertise and communication with compliance regulators, industry leaders, and agencies.
Contribute to continuous improvement of compliance delivery, client experience, and internal enablement resources.