CMMC (FedRAMP) Compliance/Remediation Specialist

SRG; Conshohocken (Montgomery County); On-site; USD 110,000 - 124,000; Part time

Job summary

Impellam Group is seeking a CMMC Compliance/Remediation Specialist to lead the program for a federal-contractor client in Conshohocken, PA. The role is a hands-on, two-year contract (W2) offering $80–$90 per hour.

You will own the effort to achieve and sustain CMMC certification, coordinating with IT and business teams to close gaps on an aggressive timeline. You will develop remediation plans, maintain SSPs/POA&Ms, and drive certification readiness using DFARS 252.204-7012, NIST SP 800-171 Rev

Qualifications

• Bachelor's degree in IT, Computer Science, Business Administration, or a related field
• 7+ years of IT/information security compliance or risk management experience, preferably in regulated industries
• Significant government contracting experience
• Hands-on with CMMC and/or FedRAMP; knowledge of NIST SP 800-171 Rev 2 and DFARS 252.204-7012
• Lead remediation and readiness efforts in highly compliant environments
• Experience conducting security assessments or audits
• Proficient in risk assessment methodologies
• Strong analytical and communication skills
• Ability to work independently and in a team environment

Responsibilities

• Lead CMMC implementation planning with scope, timelines, and resourcing; maintain risk assessments, SSPs, and POA&Ms
• Facilitate assessments of cybersecurity practices and controls
• Identify gaps vs. CMMC/NIST requirements and prioritize remediation
• Develop and drive remediation strategies to achieve certification
• Guide remediation plans with cross-functional teams
• Produce clear reports on findings, non-compliance areas, and remediation steps
• Develop and deliver CMMC training and awareness sessions
• Monitor regulatory changes and keep controls/documentation current

Skills

InfoSec experience

Regulatory compliance

Government contracting

CMMC knowledge

Risk assessment

Audit/assessments

Communication skills

Strategic thinking

Independent worker

Team collaboration

Education

Bachelor's degree in IT / CS / Business / related

Job description

CMMC (FedRAMP) Compliance/Remediation Specialist

Location: Conshohocken, PA Employment type: 2 year contract, W2 Compensation: $80-$90/hr

About the Role

Our client, a large organization in a regulated industry, is seeking an experienced CMMC Compliance Specialist to lead its Cybersecurity Maturity Model Certification (CMMC) effort. You will own the work of achieving and maintaining CMMC certification, which is essential to continuing and expanding the organization's business with federal agencies.

This is a hands-on, high-visibility role for someone who has stepped into environments with significant compliance gaps and driven them to a certification-ready state. You will assess current controls, build the remediation roadmap, and work with technical and business teams to close gaps against an established timeline.

You will bring significant government contracting experience and a deep understanding of DFARS 252.204-7012, NIST SP 800-171 Rev 2, FedRAMP, and CMMC.

Key Responsibilities

• Program Planning: Partner with the Project Manager to build and execute a comprehensive CMMC implementation plan, including scope, objectives, timelines, and resourcing. Maintain all required compliance documentation, including risk assessments, System Security Plans, and Plans of Action and Milestones (POA&Ms).
• Assessment Facilitation: Lead assessments of cybersecurity practices, policies, and controls against CMMC requirements through documentation review, system owner interviews, and technical evaluation.
• Gap Analysis: Compare existing controls to CMMC and NIST SP 800-171 requirements, identify gaps, and prioritize recommendations to close them and reach certification.
• Compliance Strategy: Develop and drive the strategy to achieve and sustain compliance, including a risk-based approach to remediating deficiencies quickly and effectively.
• Remediation Guidance: Work with application, infrastructure, and security teams to build remediation plans, and advise on implementing appropriate controls and best practices.
• Reporting: Produce clear, detailed reports on findings, areas of non-compliance, vulnerabilities, and recommended remediation for both technical and executive audiences.
• Training and Awareness: Develop and deliver training sessions and workshops that connect everyday cybersecurity practices to CMMC requirements.
• Continuous Improvement: Track changes in regulations, standards, and the threat landscape, and keep controls and documentation current.

Required Qualifications

• Bachelor's degree in IT, Computer Science, Business Administration, or a related field
• 7+ years of experience in IT/information security compliance, risk management, or a related field, preferably in a regulated industry
• Significant government contracting experience
• Hands-on experience with CMMC and/or FedRAMP, along with working knowledge of NIST SP 800-171 Rev 2 and DFARS 252.204-7012
• Demonstrated experience leading remediation and readiness efforts in environments with substantial compliance gaps
• Experience conducting security assessments or audits
• Proficiency in risk assessment methodologies
• Strong analytical skills, with the ability to identify vulnerabilities and recommend practical solutions
• Excellent communication skills, with the ability to work with stakeholders at all levels
• Ability to think strategically while maintaining strong attention to detail
• Ability to work independently and as part of a team

Preferred Qualifications

• Certifications such as Certified CMMC Professional (CCP), Certified CMMC Assessor (CCA), CISSP, CISM, or CEH
• Experience with FedRAMP authorization or continuous monitoring (a strong equivalent to direct CMMC experience, since CMMC is a relatively new framework)
• Prior experience preparing an organization for a formal third-party or C3PAO assessment

Impellam Group and its brands are equal-opportunity employers committed to diversity and inclusion. All qualified applicants will receive consideration without regard to race, color, religion, gender, sexual orientation, pregnancy or maternity, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application, interview process, pre-employment activity, and the performance of crucial job functions.

If you require additional disability considerations, modifications, or adjustments please let us know by contacting [e-mail] or fill out this form to request accommodations.