CMMC Compliance Manager

PCL Construction; Denver (CO); On-site; USD 127,000 - 174,500; Full time

Benefits offered by this job

Employee ownership

Performance bonuses

401(k) with company match

Medical, dental and vision benefits

Telemedicine services

Life and disability insurance

Parental leave and family care

Job summary

PCL Construction Enterprises, Inc. is seeking a CMMC Compliance Manager to lead the U.S. government cybersecurity program from its Denver HQ. The role focuses on CMMC, NIST SP 800‑171, and DFARS safeguarding, coordinating with technology, legal, contracts and operations to ensure audit-ready compliance.

The ideal candidate will oversee readiness, evidence collection, and engagement with assessors and auditors, while developing training and reporting for executive leadership.

Qualifications

• Bachelor’s degree in cybersecurity or related field preferred.
• 3–7 years in government contract compliance or cybersecurity.
• Experience with CMMC, NIST SP 800-171, DFARS safeguarding requirements.
• Experience coordinating documentation, assessments, or audit support.

Responsibilities

• Manage the company’s CMMC compliance and government cybersecurity program across the U.S. operations.
• Establish and enforce cybersecurity compliance framework and readiness trackers.
• Lead implementation of NIST SP 800‑171, CMMC, and DFARS safeguarding requirements.
• Coordinate with multiple stakeholders to drive delivery and evidence collection.
• Monitor solicitations and contracts for cybersecurity requirements and safeguarding clauses.
• Prepare status reports, dashboards, and executive summaries.

Education

Bachelor’s degree in cybersecurity, information systems, business, legal studies, government contracting, compliance, or related field

Job description

CMMC Compliance Manager

At PCL Construction Enterprises, Inc., part of the PCL Family of Companies (PCL), we don’t just build projects—we build opportunities, careers and communities. We are 100% employee‑owned, every employee has a stake in our success, and that shared commitment drives how we work, grow and lead in the construction industry.

We’re a team of builders who care deeply about what we create and who we build it with. That includes you. We are not only investing in what’s next in construction, we are investing in what’s next for your career.

We are seeking to hire a CMMC Compliance Manager for our U.S. Head Office located in Denver, CO. Reporting to the President & COO, U.S. Operations and Assistant General Counsel, you will work closely with the Sr. Manager, Cybersecurity and Networking Business Technology and the Government Contract Compliance Officer. The CMMC Compliance Manager will be responsible for supporting the company’s U.S. government cybersecurity compliance program, with primary focus on Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171 compliance, DFARS cyber requirements, and related contractual safeguarding obligations. This role helps coordinate the governance, documentation, readiness, and ongoing compliance activities required to support eligibility for U.S. government contract performance.

Why Choose PCL?

Choose a career with rewards that matter. PCL’s total rewards are designed to support your growth, well‑being and future success—because when you succeed, we all do.

• Employee ownership opportunities that build long‑term value
• Annual discretionary performance bonuses
• 401(k) with company match
• Industry‑leading medical, dental and vision benefits
• Prescription drug coverage and telemedicine services
• Life, AD&D and disability insurance
• Paid parental leave and family care support
• HSA or FSA for healthcare, dependent care and transportation
• Mental health and wellness support, including Employee Assistance Programs
• Career growth pathways, leadership development and mentorship programs
• Access to world‑class training through PCL’s College of Construction and professional development courses
• Ongoing opportunities to learn new skills, explore different roles and grow your career across sectors and regions

Responsibilities

• Manage the company’s CMMC compliance and government cybersecurity program across the U.S. operations, with accountability for readiness, assessment preparation, and ongoing compliance.
• Establish, maintain, and enforce the cybersecurity compliance framework, including policies, procedures, standards, workflows, control ownership models, system security plans, POA&Ms, compliance matrices, evidence inventories, and readiness trackers across the U.S.
• Own implementation and sustainment of NIST SP 800‑171, CMMC, DFARS/FAR safeguarding requirements, and related CUI handling obligations across applicable U.S. government contract work.
• Lead day‑to‑day cross‑functional execution of required technical and administrative controls, coordinating with business technology, information technology, cybersecurity, legal/compliance, contracts, operations, and other stakeholders to drive delivery, timelines, evidence collection, and issue resolution.
• Own CMMC readiness and assessment preparation, including boundary definition, control narratives, inheritance strategy, evidence organization, assessment support files, and engagement with assessors, customers, and external auditors.
• Monitor cybersecurity requirements in solicitations, contracts, modifications, and flow‑down provisions, including DFARS 252.204‑7012, 252.204‑7019, 252.204‑7020, 252.204‑7021, FAR 52.204‑21, and related safeguarding clauses.
• Coordinate subcontractor and supplier compliance activities where cybersecurity clauses, safeguarding requirements, or CUI handling obligations apply.
• Track remediation items, follow‑up actions, milestone dates, and compliance gaps to closure, and maintain audit‑ready records in designated repositories in accordance with company governance requirements.
• Support incident reporting workflows, escalation paths, and documentation related to government cybersecurity reporting obligations.
• Develop and administer role‑based training and awareness for CMMC, CUI handling, safeguarding obligations, and project‑level compliance execution.
• Prepare recurring status reports, dashboards, metrics, and executive summaries regarding cybersecurity compliance posture, readiness, and program progress.
• Participate in internal working groups and stay current on changes to government cybersecurity requirements, assessing impacts and communicating updates to internal stakeholders.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, business, legal studies, government contracting, compliance, or related field preferred.
• Minimum 3–7 years of experience in government contract compliance, cybersecurity compliance, IT governance, audit support, risk management, or related work.
• Experience supporting U.S. government contract requirements strongly preferred.
• Working knowledge of CMMC, NIST SP 800‑171, DFARS cyber clauses, FAR safeguarding requirements, and Controlled Unclassified Information requirements preferred.
• Experience coordinating compliance documentation, assessments, evidence collection, or audit support strongly preferred.
• Familiarity with policy/procedure management, issue tracking, database development and corrective action follow‑up.
• Experience working across legal/compliance, IT, contracts, operations, and business stakeholders preferred.
• Demonstrated ability to work as member of a team and trusted client advisor.
• Ability to establish and maintain good rapport with executives, district office management and other internal clients.

The estimated salary range for this role is $127,000 - $174,500, based on your experience and qualifications. Final compensation will be confirmed as part of a personalized offer.

We anticipate this requisition will be open for a minimum of five days, though it may be open for a longer period of time. We encourage your prompt application.

Your Work Has Purpose Here

PCL projects are where life happens, where communities connect, careers begin, and progress is made. Regardless of the type of project, we are building something bigger: a future that is inclusive, resilient and full of opportunity.

At PCL Construction Enterprises, Inc., we are committed to creating a workplace where everyone belongs. We value the diverse experiences, identities and perspectives our employees bring. Employment decisions are based on merit, potential and the drive to make a difference, regardless of race, gender, age, ability or background.

If you require accommodation during the application process, please contact [e-mail] and include the position and location of interest.

Company: PCL Construction Enterprises, Inc.

Primary Location: Denver, Colorado

Job Title: CMMC Compliance Manager

Requisition ID: 13286