Security Compliance Program Coordinator

Management Solutions LLC•Knoxville, TN

7d•Hybrid

About The Position

The Security Compliance Program Coordinator is an early-career, cross-functional position responsible for supporting the company’s cybersecurity, industrial security, information technology, and compliance programs. As a CMMC Level 2 certified organization, Management Solutions is committed to maintaining continuous compliance and protecting sensitive federal information. This role coordinates Cybersecurity Maturity Model Certification (CMMC) readiness, serves as the liaison between employees and the company's Managed Service Provider (MSP), manages company technology assets, and supports the Facility Security Officer (FSO) in administering the company's industrial security program. Additionally, leadership will look to you to recommend improvements to security, compliance, and technology processes to improve efficiency and reduce organizational risk. This position is ideal for an organized professional who enjoys coordinating multiple operational disciplines while ensuring compliance with federal security regulations and company policies.

Requirements

Bachelor's degree in Information Systems, Cybersecurity, Business Administration, Information Technology, Security Management, Related discipline.
Equivalent military or professional experience may substitute.
Experience supporting CMMC or cybersecurity compliance activities.
Experience supporting industrial security programs or Facility Security Officer responsibilities.
Experience coordinating Information Technology support activities and working with Managed Service Providers.
Experience managing company technology assets or equipment inventories.
Experience working in a federal contractor environment.
Ability to obtain and maintain a U.S. Government security clearance
U.S. citizenship is required for this position due to applicable federal contract and security requirements.

Nice To Haves

Working knowledge of CMMC Framework
Working knowledge of NIST SP 800-171
Working knowledge of NIST SP 800-53
Working knowledge of NISPOM (32 CFR Part 117)
Working knowledge of DISS/NBIS
Working knowledge of Government security clearance processes
Working knowledge of Microsoft 365
Working knowledge of Microsoft Teams
Working knowledge of SharePoint
Working knowledge of Federal contractor compliance requirements
Eligibility for access to classified information

Responsibilities

Serve as the organization's day-to-day coordinator for CMMC compliance activities.
Coordinate implementation and maintenance of CMMC security practices to maintain continuous CMMC readiness.
Maintain System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and related documentation.
Track corrective actions through POA&M management.
Coordinate annual tabletop exercises.
Track compliance activities and remediation efforts.
Coordinate annual policy reviews/self-assessments.
Support external C3PAO assessments and customer audits.
Assist with internal assessments and external audits.
Maintain evidence repositories and artifact collection.
Track and coordinate employee cybersecurity awareness training.
Monitor compliance with cybersecurity policies.
Maintain compliance calendars for policy reviews, tabletop exercises, training, vulnerability scans, assessments, and annual reviews.
Maintain compliance dashboards and executive status reports.
Support incident documentation and corrective actions.
Manage monthly communications to staff.
Serve as the bridge between employees and the company's Managed Service Providers.
Coordinate employee onboarding and offboarding technology requirements.
Coordinate hardware deployment and replacement.
Track software licensing and assignments.
Assist with account provisioning requests.
Support technology policy implementation.
Escalate critical IT issues to vendors and leadership.
Maintain hardware lifecycle and warranty tracking.
Maintain IT asset inventories.
Coordinate annual equipment inventory verification.
Coordinate equipment disposal in accordance with company policy.
Prepare asset reports for management.
Coordinate technology purchases.
Maintain inventory records for: Laptops, Mobile devices, Monitors, Peripherals, Government-furnished equipment (GFE), Specialized technical equipment.
Track equipment assignments and returns.
Coordinate shipping of equipment to remote employees.
Review monthly MSP reports.
Coordinate security remediation activities.
Assist the organization's Facility Security Officer in accordance with the National Industrial Security Program (NISP).
Administer the company's industrial security program.
Maintain compliance with 32 CFR Part 117 (NISPOM).
Coordinate personnel security clearances.
Maintain clearance records.
Assist with visit requests.
Coordinate security inspections.
Manage facility security clearance authorization.
Support classified contract startup activities.
Coordinate self-inspections and corrective actions.
Serve as the primary point of contact with Defense Counterintelligence and Security Agency (DCSA).