CMMC Compliance Manager – Level 2 Readiness

Hidonix Industries; Santa Monica (CA); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Flexible PTO

Job summary

Hidonix seeks a CMMC & Information Security Compliance Manager to lead and sustain CMMC Level 2 and NIST SP 800-171 compliance at our Santa Monica site. You will translate requirements into practical controls, policies, and day-to-day processes, coordinating with IT, Engineering, and Legal to close gaps and maintain readiness.

You will own the SSP, POA&Ms, and evidence repository, prepare for assessments, and serve as primary contact for external assessors and DoD-aligned partners.

Qualifications

• Demonstrated hands-on experience implementing or managing NIST SP 800-171 requirements.
• Direct experience preparing an organization for CMMC Level 2 certification or assessment.
• Strong knowledge of CUI protection and federal cybersecurity compliance requirements.
• Experience developing or maintaining SSPs, POA&Ms, policies, procedures, control evidence, and assessment documentation.
• Ability to interpret security requirements and translate them into actionable technical and operational controls.
• Experience conducting compliance gap assessments and managing remediation efforts.
• Strong project-management and organizational skills, with the ability to coordinate requirements across multiple departments.
• Excellent written communication and documentation skills.
• Ability to communicate technical and compliance requirements clearly to both technical and non-technical stakeholders.

Responsibilities

• Lead and manage Hidonix’s CMMC Level 2 compliance and assessment-readiness program.
• Own and maintain the CMMC Level 2 assessment scope, including identifying and classifying in-scope assets, systems, CUI environments, and applicable External Service Providers (ESPs).
• Maintain and continuously update the organization’s System Security Plan (SSP) to reflect environment and implementation of security requirements.
• Develop, manage, and track Plans of Action & Milestones (POA&Ms) and remediation activities through completion.
• Conduct internal gap assessments, security control assessments, and readiness reviews against CMMC and NIST requirements.
• Coordinate and conduct internal examination, interview, and test activities to verify security controls are implemented correctly.
• Map security-control implementations and supporting evidence to CMMC Level 2 objectives.
• Establish and maintain an assessment-ready evidence repository.
• Establish and maintain processes for securely handling, storing, transmitting, and accessing CUI.
• Develop and maintain cybersecurity policies, procedures, standards, and supporting documentation.
• Partner with IT, Cybersecurity, Engineering to ensure controls are implemented and maintained.
• Validate controls related to access control, MFA, audit logging, configuration management, vulnerability management, encryption, incident response, physical security, and network protection.
• Coordinate with accountable control owners to address deficiencies and drive remediation.
• Ensure employees understand their information-security and CMMC responsibilities.
• Coordinate CMMC Level 2 self-assessments and C3PAO assessments and closeout activities.
• Serve as primary compliance contact for external assessors and partners.
• Assist with supplier, vendor, and third-party cybersecurity requirements.
• Track changes to CMMC/NIST/DFARS and evaluate impact on the program.
• Develop training and guidance for employees on CMMC and information security.
• Support incident-response readiness and documentation.
• Continuously monitor and reassess controls for effectiveness and readiness.
• Maintain CMMC/NIST control implementation matrices and CUI inventories.

Skills

NIST SP 800-171

CMMC Level 2

Compliance management

Policy development

Documentation

Gap assessments

Project management

Written communication

Stakeholder communication

Job description

Hidonix seeks a CMMC & Information Security Compliance Manager to lead and sustain CMMC Level 2 and NIST SP 800-171 compliance at our Santa Monica site. You will translate requirements into practical controls, policies, and day-to-day processes, coordinating with IT, Engineering, and Legal to close gaps and maintain readiness.

You will own the SSP, POA&Ms, and evidence repository, prepare for assessments, and serve as primary contact for external assessors and DoD-aligned partners.