CMMC Compliance Specialist (Part-Time)

Remotedxb; Dubai; On-site; AED 200,000 - 360,000; Full time

Job summary

Horizon Industries, a federal contractor focused on cybersecurity maturity and compliance within the defense-industrial base, seeks a senior CMMC security executive in Dubai. You will serve as the designated expert for CMMC activities and own CUI processing systems, guiding policy and risk management.

You will oversee the GCC High environment (Entra ID, CA, MFA) and manage risk assessments, POA&M closures, and formal assessment preparations in a high-security DoD context.

Qualifications

• Demonstrated experience supporting CMMC Level 2 or NIST SP 800-171 compliance programs
• Experience operating within DoD, federal contractor, or defense-industrial-base environments
• Strong working knowledge of Microsoft 365 GCC High, Entra ID, Defender, Purview, Sentinel, and Intune

Responsibilities

• Serve as expert for all CMMC activities and executive owner of systems processing CUI
• Provide executive oversight of the CMMC Level 2 program and approve policies and artifacts
• Oversee Microsoft GCC High environment: Entra ID, Conditional Access, MFA, and endpoint security
• Lead annual risk assessments and manage POA&M development and closure
• Review and approve SSP, Continuous Monitoring Plan, and Incident Response Documentation
• Support preparation for self-, mock-, and formal C3PAO assessments

Skills

CMMC Level 2 experience

NIST SP 800-171 knowledge

DoD/federal contractor experience

Governance & risk management

Security policy oversight

Tools

Microsoft 365 GCC High

Entra ID

Microsoft Defender

Microsoft Purview

Microsoft Sentinel

Intune

Job description

Responsibilities

• Serve as the designated expert for all CMMC-related activities and executive owner of systems processing Controlled Unclassified Information (CUI)
• Provide executive oversight of the CMMC Level 2 program, reviewing and approving policies, procedures, and compliance artifacts
• Oversee the Microsoft GCC High environment, including Entra ID, Conditional Access, MFA, and endpoint security
• Lead annual and periodic cybersecurity risk assessments and manage POA&M development and closure
• Review and approve the System Security Plan (SSP), Continuous Monitoring Plan, and Incident Response Documentation
• Support preparation for self-assessments, mock assessments, and formal C3PAO assessments

Requirements

• Demonstrated experience supporting CMMC Level 2 or NIST SP 800-171 compliance programs
• Experience operating within DoD, federal contractor, or defense-industrial-base environments
• Strong working knowledge of Microsoft 365 GCC High, Entra ID, Microsoft Defender, Microsoft Purview, Microsoft Sentinel, and Intune

Preferred Qualifications

• Previous experience as a CIO, CISO, or equivalent executive role
• Experience successfully guiding organizations through CMMC certification
• Familiarity with DFARS 252.204-7012, 7019, 7020, and 7021
• Certifications such as CISSP, CISM, CGRC, CCSP, CCP, or CCA

About the Company

Horizon Industries is a federal contractor focusing on cybersecurity maturity and compliance within the defense-industrial base.