Hybrid CMMC Compliance Program Lead

Balfour Beatty US; Dallas (TX); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Health Savings Account

401(k) with company match

Paid time off

Tuition Assistance

Employee Referral Bonus

Job summary

Balfour Beatty US is seeking a CMMC Program Manager to lead its cybersecurity maturity program for Federal and private contracts. The role emphasizes governance, documentation, and continuous improvement of security controls in a hybrid environment.

Candidates should have deep knowledge of NIST SP 800-171, FAR/DFARS, and CMMC requirements, with strong analytical and leadership skills. Dallas-based flexibility is provided with in-office three days per week.

Qualifications

• Bachelor's degree in risk management, information security, or a related field or equivalent DoD experience.
• 7+ years in cybersecurity, governance, risk management, or information security with DoD exposure.
• Familiarity with NIST SP 800-171, FAR/DFARS, and CMMC levels 1-2.

Responsibilities

• Own the organization’s CMMC compliance program for the secure enclave.
• Lead assessments, risk reviews, audits, and coordination with C3PAOs.
• Develop and maintain SSP, POA&Ms, and supporting documentation.
• Coordinate with IT, Legal, HR, and operations on governance and reporting.
• Present status, risk posture, and recommendations to leadership.
• Coordinate with vendors and ensure alignment with contracts and regulations.
• Lead incident response tabletop exercises and post-incident improvements.

Skills

Analytical thinking

Project management

Communication

Organizational skills

NIST SP 800-171 familiarity

CMMC knowledge

Policy and governance

Education

Bachelor's degree in Risk Management/Information Security or related field

Tools

ISCM concepts

SSP/POA&M development

Job description

Balfour Beatty US is seeking a CMMC Program Manager to lead its cybersecurity maturity program for Federal and private contracts. The role emphasizes governance, documentation, and continuous improvement of security controls in a hybrid environment.

Candidates should have deep knowledge of NIST SP 800-171, FAR/DFARS, and CMMC requirements, with strong analytical and leadership skills. Dallas-based flexibility is provided with in-office three days per week.