Federal Security Compliance Expert (CMMC/NIST)

Supermicro; San Jose (CA); On-site; USD 133,000 - 165,000; Full time

Job summary

Supermicro seeks a Security Compliance Industry Specialist to drive day-to-day federal compliance execution, security assurance, and audit readiness for SMCI Federal. Reporting to the Director of Federal Compliance, the role ensures hardware platforms, manufacturing environments, and technical data adhere to CMMC Level 2, NIST SP 800-171, DFARS, and ITAR standards.

The role acts as an independent validator, collaborating with cross-functional teams to safeguard federal revenue across public

Qualifications

• 5+ years hands-on experience in security risk management, compliance auditing, or technical GRC execution within a highly regulated environment.
• Direct experience managing NIST SP 800-171, CMMC Level 2, DFARS (252.204-7012/7019/7020), and ITAR compliance frameworks.
• Familiar with IAM, access control matrices, audit logging, and data encryption.

Responsibilities

• CMMC & NIST SP 800-171 program execution: Self-Assessment & scoring; SSP & POA&M ownership and updates.
• DFARS safeguarding, incident response & cloud control validation: 72-hour reporting readiness and tabletop exercises.
• ITAR & Controlled Technical Data administration: Technology Control Plans and deemed-export prevention.
• Physical Security & Facility Controls: implement and validate protective measures at the federal facility.
• Audit Readiness & Independent Validation: ensure an assessment-ready posture and separation of duties.
• Training, Insider Threat & Compliance Operations: drive 100% completion of mandatory trainings and maintain compliance evidence.

Skills

Security risk management

Compliance auditing

GRC execution

IAM & access controls

Audit artifacts drafting

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

ServiceNow

Jira

Cloud-based GRC platforms

Job description

Supermicro seeks a Security Compliance Industry Specialist to drive day-to-day federal compliance execution, security assurance, and audit readiness for SMCI Federal. Reporting to the Director of Federal Compliance, the role ensures hardware platforms, manufacturing environments, and technical data adhere to CMMC Level 2, NIST SP 800-171, DFARS, and ITAR standards.

The role acts as an independent validator, collaborating with cross-functional teams to safeguard federal revenue across public