Federal Compliance Security Specialist (CMMC/NIST)

Supermicro; San Jose (CA); On-site; USD 133,000 - 165,000; Full time

Job summary

Supermicro is seeking a Security Compliance Industry Specialist to drive day-to-day federal compliance execution, security assurance, and audit readiness for SMCI Federal. This hands-on role reports to the Director of Federal Compliance and ensures our hardware platforms, facilities, and data adhere to NIST SP 800-171, DFARS, CMMC Level 2, and ITAR requirements.

The specialist acts as an independent validator, collaborating with cross-functional teams to close control gaps, prepare for audits,

Qualifications

• Bachelor's degree in CS, IT, cybersecurity, or a related field.
• 5+ years in security risk management, compliance auditing, or GRC in regulated settings.
• Direct experience with NIST SP 800-171, CMMC Level 2, DFARS, and ITAR.
• Knowledge of IAM, access control matrices, audit logging, and data encryption.

Responsibilities

• Lead NIST SP 800-171 self-assessments and SPRS submissions.
• Own SSP and POA&M, tracking gaps and closing SLAs.
• Maintain incident response readiness and annual tabletop exercises.
• Validate shared-responsibility controls across GCC High and SMCI systems.

Skills

Security risk management

Compliance auditing

GRC execution

IAM knowledge

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

ServiceNow

Jira

GRC tooling

Job description

Supermicro is seeking a Security Compliance Industry Specialist to drive day-to-day federal compliance execution, security assurance, and audit readiness for SMCI Federal. This hands-on role reports to the Director of Federal Compliance and ensures our hardware platforms, facilities, and data adhere to NIST SP 800-171, DFARS, CMMC Level 2, and ITAR requirements.

The specialist acts as an independent validator, collaborating with cross-functional teams to close control gaps, prepare for audits,