CMMC/NIST Compliance Lead — Remote

Iviry IT; Arlington (VA); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401(k) with Company Match

PTO & Holidays

Life & Disability Insurance

Job summary

Iviry, LLC is a veteran-owned IT services company providing MSP/MSSP with a focus on NIST/CMMC compliance. We seek a CMMC Compliance Manager / Technical Solutions Lead to own engagements from assessment through remediation, readiness, and sustainment, balancing GRC with hands-on technical delivery.

The role covers 50% engagement ownership and 50% technical remediation, including Microsoft 365 GCC/GCC High, secure enclaves, and security controls. Remote work with limited travel may be required.

Qualifications

• :

Responsibilities

• Own NIST SP 800-171 and CMMC engagements from assessment through remediation and sustainment.
• Perform compliance assessments and gap analyses against requirements and objectives.
• Develop, review, maintain SSPs, POA&Ms, security policies, procedures, control narratives, and evidence.
• Drive remediation plans with findings, actions, owners, priorities, schedules, and completion criteria.
• Coordinate evidence collection, readiness reviews, and customer/assessor interactions.
• Maintain engagement plans, schedules, risks, dependencies, and communications.
• Serve as customer-facing delivery lead explaining requirements, options, risk, priorities, and status.
• Support sustainment, recurring reviews, and maintenance of artifacts after remediation.

Skills

GRC leadership

SSP management

POA&M management

NIST SP 800-171

CMMC

Microsoft 365

Customer-facing

Project ownership

PowerShell

Tools

PowerShell

Job description

Iviry, LLC is a veteran-owned IT services company providing MSP/MSSP with a focus on NIST/CMMC compliance. We seek a CMMC Compliance Manager / Technical Solutions Lead to own engagements from assessment through remediation, readiness, and sustainment, balancing GRC with hands-on technical delivery.

The role covers 50% engagement ownership and 50% technical remediation, including Microsoft 365 GCC/GCC High, secure enclaves, and security controls. Remote work with limited travel may be required.