Compliance Architect

Summit7; Huntsville (AL); Remote; USD 135,000 - 165,000; Full time

Benefits offered by this job

Health benefits

Vision benefits

401k with match

Unlimited mobile plan

Paid vacation and sick days

Certifications bonuses

Job summary

Summit 7 Systems is seeking a Compliance Architect to serve as a client-facing CMMC advisor and internal escalation resource for complex compliance matters. You will conduct strategic reviews during early CMMC Level 2 journeys, capturing current and desired states and delivering a roadmap for successful implementation.

You will work with executive sponsors to align business objectives, regulatory requirements, and technical constraints, identifying risks and delivering actionable plans.

Qualifications

• Bachelor's degree in Information Security, Information Technology, Risk Management, or Business (or equivalent practical experience)
• Certified CMMC Assessor
• CISSP (active and in good standing) or equivalent DoD-approved IAM/IAT certs
• Additional cybersecurity, compliance, risk, or audit certifications (e.g. CCSP, CRISC, CISA) a plus
• 10+ years of cybersecurity/compliance/risk management experience including DoD-aligned compliance efforts like CMMC/NIST SP 800-171
• Experience advising executive leadership on compliance and regulatory strategy
• Experience across multiple governance/regulatory requirements
• Experience across industries (e.g. professional services, engineering, aerospace, manufacturing)
• Excellent verbal and written communication skills
• Familiarity with Summit 7 MSP/MSSP offerings and enterprise IT architectures (on-premise and cloud)
• Proficiency with Microsoft Office tools

Responsibilities

• Lead strategic discovery and advisory engagements with clients and stakeholders
• Elicit and document goals to align with CMMC requirements and business objectives
• Validate scoping assumptions, boundaries, dependencies, and obligations
• Identify risk areas early in engagements (OT, changes, manufacturing, equipment)
• Assess client readiness, governance, and expectations for achieving compliance
• Develop a strategic compliance roadmap with current vs future state and risks
• Provide strategic recommendations to internal teams for next steps
• Serve as senior compliance consultant for escalations and pre-sales activities
• Create internal guidance and training content for Summit 7 clients
• Maintain regulatory liaison and keep up with regulators/industry leaders
• Support continuous improvement of compliance delivery and client experience

Skills

Cybersecurity

Compliance

Client advisory

CMMC

Risk management

Communication

Education

Bachelor's degree

Certified CMMC Assessor

CISSP

DoD-8570/8140 certs

Job description

Position Title: Compliance Architect

Position Type: Salary/Exempt

Clearance: n/a

Location: Huntsville, AL/Remote

Salary*: $150,000+

*Dependent upon qualifications

Summit 7 is here to rise above the ordinary. The work we do here goes far beyond day-to-day projects - it further protects the US defense industrial base from cyber threats, fosters thought leadership, and creates growth opportunities. Our support staff, sales team and technicians are all coming together to make a difference. We also recognize that you're a person with life beyond work, that's why we invest in meaningful health and welfare benefits such as:

• Excellent health/dental benefits from BCBS
• See into the future with our luxurious VSP vision benefits
• Prepare for the long-haul courtesy of our 401k with company matching
• Unlimited mobile phone plan
• 10 days' vacation, 7 days sick time
• Bonuses and salary increase potential via our certifications plan

We do cool work here, defying expectations by simply being who we are - each of us makes an impact.

Essential Functions

The Compliance Architect serves as a client-facing CMMC advisor and internal escalation resource for complex compliance and business matters. This role conducts strategic compliance reviews during the early stages of a client's CMMC Level 2 journey to capture current state, desired future state, and a strategic roadmap for successful program implementation. The role works with executive sponsors and key stakeholders to align business objectives, regulatory requirements, technical constraints, and expectations. The advisor identifies potential risks, validates high-level scoping assumptions, assesses organizational readiness and dependencies, and delivers a clear, actionable roadmap to support successful client outcomes and effective internal delivery.

Duties and Responsibilities include:

• Lead strategic discovery and advisory engagements with clients and key stakeholders
• Elicit and document immediate and long-term goals from both operational and executive perspectives to ensure alignment with CMMC requirements and business objectives
• Validate high-level CMMC scoping assumptions, organizational boundaries, external dependencies, additional governance or compliance obligations, and inherited or shared control providers
• Identify potential risk areas early in the engagement (e.g., operational technology, planned architectural changes, manufacturing systems, printed materials, specialized equipment, parent-organization constraints)
• Assess client readiness, resourcing, governance, and expectation for meeting compliance goals
• Develop a strategic compliance roadmap outlining current state, desired future state, key risks, and recommended paths forward
• Provide clear strategic recommendations to internal teams conducting next steps
• Serve as a senior compliance consultant supporting client escalations, complex compliance discussions, and pre-sales activities as requested
• Develop internal FAQs, guidance materials, and training content tailored to Summit 7 clients and service offerings as priorities permit.
• Maintain subject matter expertise and communication with compliance regulators and/or industry leaders and agencies.
• Contribute to continuous improvement of compliance delivery, client experience, and internal enablement resources

Requirements

• Bachelor's degree in Information Security, Information Technology, Risk Management, or Business (or equivalent practical experience)
• Certified CMMC Assessor
• CISSP (active and in good standing), or an equivalent DoD-approved IAM or IAT Level II or Level III certification under DoD 8140/8570 guidance
• Additional cybersecurity, compliance, risk, or audit certifications (e.g. CCSP, CRISC, CISA) a plus
• 10+ years of progressive experience in cybersecurity, compliance, or risk management, including at least 5 years supporting or performing DoD-aligned compliance efforts such as CMMC, NIST SP 800-171) in assessment and strategic advisory roles
• Experience advising executive leadership on compliance, cybersecurity risk, and regulatory strategy
• Experience within organizations operating under multiple or overlapping governance, regulatory, or contractual requirements
• Experience supporting organizations across diverse industries (e.g. professional services, engineering, aerospace, manufacturing and construction)
• Excellent verbal and written communication skills, with the ability to communicate effectively at all organizational levels
• Strong understanding of Summit 7 MSP/MSSP service offerings, with a broad familiarity with enterprise IT architectures, including on-premises and cloud (Microsoft 365 and Azure)
• Proficient with Microsoft Office productivity and collaboration tools.

Work Conditions

Work is typically performed in an office environment. Must be able to remain in a stationary position for extended periods of time. Will move about designated office space. Regularly operates a computer and other office productivity machinery, such as a copy machine, and computer printer. Must be able to lift up to 25 pounds at a time. The person in this position frequently communicates with employees and clients.

Summit 7 Systems is an equal opportunity/ affirmative action employer and an alcohol and drug free workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Summit 7 Systems requires background checks. Any offer of employment is contingent upon the results of a reference/background check. We are a drug and alcohol-free workplace and require pre-employment drug screening.