CMMC Compliance Lead (Remote) | NIST & DoD Standards

Beryllium InfoSec, Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Beryllium InfoSec, Inc. seeks a CMMC Compliance Manager to guide Cuick Trac clients through implementing and maintaining customer-responsible controls and preparing them for third‑party assessments.

You will translate the Customer Responsibility Matrix into actionable plans, build required documentation, and keep clients compliant as contracts and regulations evolve. Remote work with travel as needed is possible.

Qualifications

• 2–4 years of customer-facing experience with NIST SP 800-171, NIST SP 800-53, CMMC, and the NIST RMF.
• Knowledge of DoD cybersecurity clauses DFARS 252.204-7012, 252.204-7021, 252.240-7997, and FAR 52.240-93.
• Familiarity with the CMMC program rule (32 CFR Part 170), including scoping, POA&M, and affirmation requirements.
• Experience with POA&M management and developing SSPs/POA&Ms.

Responsibilities

• Walk clients through the Cuick Trac Customer Responsibility Matrix and separate inherited, shared, and customer-responsible controls.
• Create and validate client-specific inheritance and responsibility documentation.
• Provide remediation guidance to implement NIST SP 800-171/CMMC Level 2 controls, including diagrams, data flows, and incident response plans.
• Develop and maintain the SSP and POA&M, tracking closeout within required timeframes.
• Prepare clients for CMMC Level 2 C3PAO assessments and, where applicable, DCMA DIBCAC assessments.
• Assemble evidence packages and coach client personnel for assessor interviews and demonstrations.
• Conduct annual compliance reviews and review government contracts for cybersecurity and export-control requirements.

Skills

NIST SP 800-171

NIST SP 800-53

CMMC

RMF

FAR 52.240-93

CMMC Level 2

Tools

Firewalls

SIEM

Vulnerability management

MFA

Endpoint protection

DLP

Job description

Beryllium InfoSec, Inc. seeks a CMMC Compliance Manager to guide Cuick Trac clients through implementing and maintaining customer-responsible controls and preparing them for third‑party assessments.

You will translate the Customer Responsibility Matrix into actionable plans, build required documentation, and keep clients compliant as contracts and regulations evolve. Remote work with travel as needed is possible.