GRC & CMMC Compliance Lead — Build Enterprise Programs

PAR Systems UK Ltd; Saint Paul (MN); On-site; USD 135,000 - 165,000; Full time

Benefits offered by this job

401(k) & matching

Medical Insurance

Dental Insurance

Vision Insurance

Disability & Life Insurance

PTO

Job summary

PAR Systems UK Ltd. is seeking a GRC Program and CMMC Compliance Lead to build and mature our enterprise Governance, Risk & Compliance program with an initial focus on CMMC readiness and ongoing compliance.

This role partners with Information Systems, Procurement, and business leaders to translate complex requirements into practical expectations, establish repeatable processes, and deliver meaningful risk reporting.

Qualifications

• Three or more years of progressive experience in governance, risk, compliance, IT audit, information security, or cybersecurity compliance.
• Hands-on experience implementing, assessing, or managing NIST SP 800-171 and/or CMMC requirements and self-assessments.
• Working knowledge of CMMC Level 2, NIST SP 800-171 Rev. 2, NIST SP 800-171A assessment objectives, DFARS 252.204-7012, and applicable CMMC contract requirements.
• Experience developing and maintaining a System Security Plan, managing Plan of Action & Milestones, control narratives, system descriptions, asset inventories, data-flow documentation, and assessment evidence.
• Working knowledge of CMMC assessment scoping, including CUI and FCI identification, system boundaries, security protection assets, shared services, cloud environments, and external service providers.
• Strong documentation and evidence-management skills, with demonstrated ability to maintain current compliance artifacts, track cybersecurity findings, coordinate remediation, and drive POA&M items through validated closure.
• US Person

Responsibilities

• Lead the build and maturation of PAR's GRC program with initial focus on CMMC readiness.
• Coordinate NIST SP 800-171 self-assessments, SSP, POA&M, and evidence.
• Translate requirements into practical business expectations and establish accountability.
• Collaborate with IT, procurement, and external advisors to drive remediation and closure of findings.
• Develop repeatable processes, reporting, and governance across PAR.

Skills

Governance & Risk

IT Audit

Cybersecurity Compliance

NIST SP 800-171

CMMC

Documentation & Reporting

US Person

Job description

PAR Systems UK Ltd. is seeking a GRC Program and CMMC Compliance Lead to build and mature our enterprise Governance, Risk & Compliance program with an initial focus on CMMC readiness and ongoing compliance.

This role partners with Information Systems, Procurement, and business leaders to translate complex requirements into practical expectations, establish repeatable processes, and deliver meaningful risk reporting.