Hybrid CMMC Compliance Program Manager

Socket.dev; Dallas (TX); On-site; USD 125,000 - 195,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Health Savings Account

401(k) with company match

Paid time off

Tuition Assistance

Employee Referral Bonus

Job summary

Balfour Beatty Construction, LLC in the US seeks a CMMC Program Manager to lead the cyber and physical security compliance for FCI and CUI on federal contracts. Requires strong knowledge of FAR/DFARS, exceptional analytical, project management, and communication skills.

The role is hybrid; office in Falls Church, VA or Dallas, TX with three days onsite. You will own the compliance program, develop CMP, SSP/POA&Ms, coordinate audits with C3PAOs, and report risk to executive leadership.

Qualifications

• 7+ years in cybersecurity, governance, risk management, compliance, or information security.
• 3+ years supporting NIST SP 800-171 related programs.
• Familiarity with NIST SP 800-171, CMMC Level 1 and 2, FAR and DFARS.
• Demonstrated experience developing or managing System Security Plans (SSP) and POA&Ms.
• Bachelor’s degree in Risk Management, Compliance and Regulation, Information Security, Information Systems, or a related field.

Responsibilities

• Serve as the organization’s primary internal authority for CMMC compliance within the secure enclave.
• Own the organization’s CMMC compliance program for the secure enclave.
• Develop, maintain, and periodically review the CMP and ISCM procedures.
• Develop, review, maintain, and coordinate approval of CMMC-related policies and documentation.
• Define and manage ISCM strategy, risk tolerance, and reporting cadence.

Skills

Governance & risk mgmt

Documentation & reporting

Cross-functional leadership

Executive communication

Security controls

Education

Bachelor’s degree in related field

Tools

NIST SP 800-171

CMMC framework

SSP/POA&M development

Job description

Balfour Beatty Construction, LLC in the US seeks a CMMC Program Manager to lead the cyber and physical security compliance for FCI and CUI on federal contracts. Requires strong knowledge of FAR/DFARS, exceptional analytical, project management, and communication skills.

The role is hybrid; office in Falls Church, VA or Dallas, TX with three days onsite. You will own the compliance program, develop CMP, SSP/POA&Ms, coordinate audits with C3PAOs, and report risk to executive leadership.