Federal Security Compliance Specialist (CMMC/NIST)

Supermicro; San Jose (CA); On-site; USD 133,000 - 165,000; Full time

Job summary

Supermicro is seeking a Security Compliance Industry Specialist to drive federal compliance execution, security assurance, and audit readiness for SMCI Federal. You will validate controls, manage SSP/POA&Ms, and coordinate with global teams to safeguard CUI and ITAR data across facilities and systems.

The role requires 5+ years in security GRC within regulated environments, with expertise in NIST SP 800-171, DFARS, CMMC Level 2, IAM, and encryption.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related technical field.
• 5+ years of hands-on experience in security risk management, compliance auditing, or technical GRC execution within a highly regulated environment.
• Direct experience managing NIST SP 800-171, CMMC Level 2, DFARS, ITAR compliance frameworks.

Responsibilities

• Lead NIST SP 800-171 and CMMC 2 program execution with strong self-assessment and SSP/POA&M ownership.
• Validate safeguarding controls and incident response readiness for DFARS and ITAR requirements.
• Administer Technology Control Plans and deemed-export prevention for controlled data.
• Coordinate with Facilities and Security on physical protection and access controls.

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related technical field

Tools

ServiceNow

Jira

GRC platforms

Job description

Supermicro is seeking a Security Compliance Industry Specialist to drive federal compliance execution, security assurance, and audit readiness for SMCI Federal. You will validate controls, manage SSP/POA&Ms, and coordinate with global teams to safeguard CUI and ITAR data across facilities and systems.

The role requires 5+ years in security GRC within regulated environments, with expertise in NIST SP 800-171, DFARS, CMMC Level 2, IAM, and encryption.