Project Manager: CMMC Audit

Cyderes

1d•$90,000 - $110,000•Hybrid

About The Position

We are looking for an experienced Project Manager with working knowledge of the Cybersecurity Maturity Model Certification (CMMC) framework to manage all actions associated with a United States Federal CMMC audit for a strategic, enterprise customer. This Project Manager will bring familiarity with CMMC assessment processes, evidence requirements, and audit lifecycle stages, and will work closely with the customer and internal Cyderes colleagues to ensure all audit requirements are delivered on time, within scope, and to a high standard of quality. This individual will be accountable for attending all audit sessions, applying their understanding of CMMC assessment expectations to help ensure a successful outcome for everything Cyderes is required to support.

Requirements

Cybersecurity, Engineering, or a related field; equivalent experience considered.
5+ years of project management experience, preferably within cybersecurity, IT, consulting, or professional services.
Working knowledge of the CMMC framework, including its maturity levels, control domains, and assessment/audit process, gained through direct project involvement, training, or certification.
Prior experience supporting or coordinating a CMMC assessment, audit, or readiness effort — as a PM, coordinator, or adjacent role — strongly preferred.
Proven experience managing complex, customer-facing technology projects from initiation through completion.
Experience managing multiple concurrent projects, priorities, and cross-functional teams.
Demonstrated ability to manage project scope, schedule, resources, risks, and dependencies in a compliance or audit-driven environment.
Excellent customer-facing communication, presentation, organizational, and stakeholder-management skills, with the ability to translate technical CMMC requirements for non-technical stakeholders.
Strong problem-solving skills with the ability to proactively identify and resolve delivery challenges.

Nice To Haves

PMP certification
CMMC-related certification (e.g., CMMC Registered Practitioner (RP), Certified CMMC Professional (CCP), or Certified CMMC Assessor (CCA))
Experience within an MSSP, MDR/XDR provider, cybersecurity consulting firm, or security technology company.

Responsibilities

Own end-to-end delivery of CMMC audit deliverables, applying knowledge of CMMC domains, practices, and assessment objectives to ensure all audit follow-up questions are answered accurately by the appropriate Cyderes team member(s).
Develop and maintain planning documents, timelines, milestones, dependencies, resource plans, and delivery schedules aligned to CMMC assessment phases and evidence-collection requirements.
Manage resources, risks, issues, dependencies, and change requests as encountered throughout the audit process, drawing on familiarity with common CMMC audit pitfalls and assessor expectations.
Serve as the primary project-management contact for the customer on Cyderes' CMMC audit deliverables and overall support, able to speak knowledgeably to CMMC scoping, controls, and evidence standards.
Participate in all meetings, recurring status sessions, and executive updates related to the CMMC audit activity, translating CMMC-specific requirements into clear project status and risk narratives for stakeholders.
Coordinate cross-functional Cyderes teams — including cybersecurity consultants and engineers — to ensure CMMC evidence (SSPs, POA&Ms, artifacts, control mappings, etc.) is complete, accurate, and provided on time.
Proactively identify delivery risks and blockers tied to CMMC audit requirements and drive timely resolution and escalation of Cyderes-related actions.
Ensure project deliverables meet quality standards, customer expectations, and CMMC assessment criteria for everything Cyderes is accountable for providing.
Lead project closeout, lessons learned, documentation, and transition activities, capturing insights to strengthen future CMMC engagements.