Compliance Manager

ISI Enterprises; Reston (VA); Hybrid; USD 125,000 - 140,000; Full time

Benefits offered by this job

Hybrid work option

Competitive compensation

Professional development support

Job summary

ISI Enterprises is seeking a Compliance Manager with a strong technical background in CMMC/NIST 800-171a to lead a team of analysts. You will own the delivery of SSPs, POA&Ms, and policy documents for multiple government contractor clients.

You will maintain templates and playbooks, monitor progress against timelines and budgets, and coordinate with cybersecurity, engineering, and support teams. A CMMC RP/CCP/CCA certification is required.

Qualifications

• Knowledge of NIST SP 800-171A and CMMC requirements.
• Strong leadership to mentor analysts and manage multi-client engagements.
• Ability to communicate with clients and stakeholders at all levels.

Responsibilities

• Lead and develop a team of analysts through gap assessments and remediation.
• Own deliverables (SSPs, POA&Ms, policies, evidence packages) for quality and consistency.
• Interface with C3PAO auditors during Level 2 audits and client discussions.
• Track progress against timelines and budgets; escalate risks to leadership.
• Coordinate with Cybersecurity, Engineering and Support teams to ensure compliant configurations.

Skills

NIST/CMMC knowledge

Leadership

Client communications

Policy & SOP development

Education

CMMC RP/CCP/CCA certification

Tools

C3PAO exposure

Job description

ISI Enterprisesissearchingfor individuals with a strong technical background to join our team as CMMC/NIST 800-171a Compliance Manager. ISI Enterprisesis a Managed Network Services provider focusing on US Government contractors who have a need to achieve CMMC compliance.

Duties/Responsibilities:

Team Leadership

• Lead, mentor and develop a team of analysts manage a team of analysts through NIST 800-171a gap assessment and remediation projects.Including setting priorities, assigning work, and providing regular feedback.
• Participate in hiring, onboarding, and training new analysts on ISI’s assessment methods and tools.
• Conduct performance reviews and support analysts’ professional development, including CMMC certification paths (CCP/CCA).
• Balance team workload across concurrent client engagements to meet deadlines without sacrificing quality.

Delivery and quality

• Own quality control for all compliance deliverables (SSPs, POA&Ms, policies, evidence packages), reviewing them before they go to clients or C3PAOs.
• Build and maintain standard templates, checklists, and playbooks so assessments are consistent and repeatable across clients.
• Track engagement progress against timelines and budgets, and escalates risks to leadership early.

Client and business ownership

• Act as the primary compliance point of contact for assigned clients, setting expectations and managing escalations.
• Report on team metrics and client status to leadership, such as SPRS score progress, open POA&M items, and audit readiness.

Continuous improvement

• Monitor changes to CMMC, DFARS, and NIST guidance, and update team processes and client guidance accordingly.
• Gather lessons learned from C3PAO audits and feed them back into ISI’s methods and training.

Client Lifecycle Duties/Responsibilities:

• Work directly with ISI Enterprises client stakeholders throughout their onboarding and compliance gap assessment.
• Review client environments and collect evidence to determine the satisfaction of CMMC/NIST controls.
• Assist clients in the formulation of a compliant set of policies and procedures.
• Complete documentation required for a compliance assessment (Network Design Documents, Software Whitelist,etc)
• Recommend solutions to remediate identified gaps in compliance.
• Work directly with ourCybersecurity, Engineering, and Support departments to ensure all configurations are completed and tested in a compliant manner.
• Generate POAM’s (Plan of Action and Milestone) documents for the remediation of foundgaps
• Generate SSP (System Security Plan) documents to reflect deployed tools and assessmentresults
• Interface directly and lead discussions with C3PAO auditors during CMMC Level 2 Audits

Qualifications:

• As part of your work at ISI, you will potentially have access to sensitive information from the federal government. Pursuant to applicable regulations, ISI requires that all candidates for this role present proof of U.S. citizenship before hire.
• Have at least 5 years of experience in the Defense Industrial Base as a compliance manager or related position.
• Possess a strong technical background and understanding of the “How” for NIST controls and not just the “What”.
• Must hold a CMMC RP, CCP or CCA certification.
• Be detail oriented, process driven, and wellorganized.
• Have worked for or with an MSP (Managed Service Provider) and C3PAO.
• Work Well as a team, but also able to maintain motivation when working individually.
• Be comfortable speaking and/or presenting to clients and teammembers
• Have professional level verbal and written communicationsskills.
• Possess a familiarity with NIST Risk Management Framework and CMMC compliance.
• Be a self-starter, someone who is always looking to see where they can help.

What we offer:

• The salary range for this role is $125,000- $140,000 commensurate with experience
• Opportunity for hybrid work
• A competitive salary and benefits package
• A casual, friendly, and relaxed work environment
• Professional growth encouragement and support

Industrial Security Integrators, LLC (“IsI”) is an equal opportunity employer committed to affirmative action and diversity in the workplace. It is the policy of IsI to provide Equal Employment Opportunities (EEO) to Employees and Applicants, without regard to race, color, religion, sex, age, marital status, citizenship status, national origin, sexual orientation, gender identity, veteran status or disability or any other factor protected by law and to provide advancement opportunities for minorities, women, disabled individuals, and veterans. IsI is stronger and more effective when our workforce includes highly qualified individuals with diverse backgrounds, cultures, and traditions.