Compliance Architect

Summit7; Alabama; Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Health benefits

Vision benefits

401k with company matching

Unlimited mobile plan

Job summary

Summit 7 Systems seeks a Compliance Architect to guide clients through CMMC Level 2 readiness, aligning regulatory requirements with technical constraints and delivering a practical roadmap for program success.

The role is client-facing, requires deep cybersecurity and DoD compliance expertise, and involves collaborating with Summit 7 teams from Huntsville, AL, with remote options.

Qualifications

• Bachelor's degree in Information Security, IT, Risk Management or equivalent
• Certified CMMC Assessor credential or equivalent
• CISSP (active and in good standing) or DoD 8140/8570 IAT Level II/III
• Additional cybersecurity or risk certifications a plus
• 10+ years in cybersecurity, compliance or risk management, with DoD-aligned experience

Responsibilities

• Lead strategic discovery and advisory engagements with clients and stakeholders
• Document goals and ensure alignment with CMMC requirements and business objectives
• Validate scoping, dependencies and governance obligations
• Identify risks early in engagements and assess readiness
• Develop a strategic compliance roadmap with current and future state
• Provide strategic recommendations to internal teams and clients
• Support pre-sales activities and client escalations
• Develop internal FAQs and training content for Summit 7 clients

Skills

CMMC advisor

Cybersecurity leadership

Regulatory strategy

DoD compliance

Executive communication

Education

Bachelor's degree in Information Security

Certified CMMC Assessor

CISSP (active) or DoD 8140/8570 equivalent

CCSP/CRISC/CISA (plus)

Job description

Position Title: Compliance Architect

Position Type: Salary/Exempt

Clearance: n/a

Location: Huntsville, AL/Remote

Salary*: $150,000+

*Dependent upon qualifications

Summit 7 is here to rise above the ordinary. The work we do here goes far beyond day-to-day projects - it further protects the US defense industrial base from cyber threats, fosters thought leadership, and creates growth opportunities. Our support staff, sales team and technicians are all coming together to make a difference. We also recognize that you're a person with life beyond work, that's why we invest in meaningful health and welfare benefits such as:

• Excellent health/dental benefits from BCBS
• See into the future with our luxurious VSP vision benefits
• Prepare for the long-haul courtesy of our 401k with company matching
• Unlimited mobile phone plan
• 10 days' vacation, 7 days sick time
• Bonuses and salary increase potential via our certifications plan

We do cool work here, defying expectations by simply being who we are - each of us makes an impact.

Essential Functions

The Compliance Architect serves as a client-facing CMMC advisor and internal escalation resource for complex compliance and business matters. This role conducts strategic compliance reviews during the early stages of a client's CMMC Level 2 journey to capture current state, desired future state, and a strategic roadmap for successful program implementation. The role works with executive sponsors and key stakeholders to align business objectives, regulatory requirements, technical constraints, and expectations. The advisor identifies potential risks, validates high-level scoping assumptions, assesses organizational readiness and dependencies, and delivers a clear, actionable roadmap to support successful client outcomes and effective internal delivery.

Duties and Responsibilities include:

• Lead strategic discovery and advisory engagements with clients and key stakeholders
• Elicit and document immediate and long-term goals from both operational and executive perspectives to ensure alignment with CMMC requirements and business objectives
• Validate high-level CMMC scoping assumptions, organizational boundaries, external dependencies, additional governance or compliance obligations, and inherited or shared control providers
• Identify potential risk areas early in the engagement (e.g., operational technology, planned architectural changes, manufacturing systems, printed materials, specialized equipment, parent-organization constraints)
• Assess client readiness, resourcing, governance, and expectation for meeting compliance goals
• Develop a strategic compliance roadmap outlining current state, desired future state, key risks, and recommended paths forward
• Provide clear strategic recommendations to internal teams conducting next steps
• Serve as a senior compliance consultant supporting client escalations, complex compliance discussions, and pre-sales activities as requested
• Develop internal FAQs, guidance materials, and training content tailored to Summit 7 clients and service offerings as priorities permit.
• Maintain subject matter expertise and communication with compliance regulators and/or industry leaders and agencies.
• Contribute to continuous improvement of compliance delivery, client experience, and internal enablement resources

Requirements

• Bachelor's degree in Information Security, Information Technology, Risk Management, or Business (or equivalent practical experience)
• Certified CMMC Assessor
• CISSP (active and in good standing), or an equivalent DoD-approved IAM or IAT Level II or Level III certification under DoD 8140/8570 guidance
• Additional cybersecurity, compliance, risk, or audit certifications (e.g. CCSP, CRISC, CISA) a plus
• 10+ years of progressive experience in cybersecurity, compliance, or risk management, including at least 5 years supporting or performing DoD-aligned compliance efforts such as CMMC, NIST SP 800-171) in assessment and strategic advisory roles
• Experience advising executive leadership on compliance, cybersecurity risk, and regulatory strategy
• Experience within organizations operating under multiple or overlapping governance, regulatory, or contractual requirements
• Experience supporting organizations across diverse industries (e.g. professional services, engineering, aerospace, manufacturing and construction)
• Excellent verbal and written communication skills, with the ability to communicate effectively at all organizational levels
• Strong understanding of Summit 7 MSP/MSSP service offerings, with a broad familiarity with enterprise IT architectures, including on-premises and cloud (Microsoft 365 and Azure)
• Proficient with Microsoft Office productivity and collaboration tools.

Work Conditions

Work is typically performed in an office environment. Must be able to remain in a stationary position for extended periods of time. Will move about designated office space. Regularly operates a computer and other office productivity machinery, such as a copy machine, and computer printer. Must be able to lift up to 25 pounds at a time. The person in this position frequently communicates with employees and clients.

Summit 7 Systems is an equal opportunity/ affirmative action employer and an alcohol and drug free workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Summit 7 Systems requires background checks. Any offer of employment is contingent upon the results of a reference/background check. We are a drug and alcohol-free workplace and require pre-employment drug screening.