Part-Time CIO: CMMC Compliance & Security Strategy

Gofractional; Vienna (VA); Hybrid; USD 90,000 - 150,000; Part time

Job summary

Horizon Industries is seeking a Part-Time Chief Information Officer (CIO) to lead the CMMC Level 2 program, GCC High environment, and risk governance. This remote role with periodic onsite support reports to the President and Executive Leadership Team and requires ~20–40 hours monthly.

The CIO will own CMMC compliance posture, oversee SSP, POA&M, risk register, and coordinate with C3PAOs and external partners.

Qualifications

• Minimum 15 years of progressive IT leadership experience.
• Previous experience serving as CIO, CISO, or equivalent executive role.
• Demonstrated experience supporting CMMC Level 2 or NIST SP 800-171 compliance programs.
• Experience operating within DoD, federal contractor, or defense-industrial-base environments.
• Strong working knowledge of Microsoft 365 GCC High, Entra ID, Defender, Purview, Sentinel, Intune, IAM.

Responsibilities

• Provide executive ownership of Horizon's CMMC Level 2 program and controls.
• Oversee SSP, CUI Management Plan, POA&M, Risk Register, and governance artifacts.
• Coordinate across audits, readiness reviews, and assessments with executives.
• Lead risk assessments and remediation planning for compliance.
• Interface with C3PAOs, consultants, MSPs, and partners.

Skills

IT leadership

CMMC expertise

DoD contracting

Governance & risk

Executive communication

Tools

Microsoft 365 GCC High

Entra ID

Microsoft Defender

Microsoft Purview

Microsoft Sentinel

Intune

Job description

Horizon Industries is seeking a Part-Time Chief Information Officer (CIO) to lead the CMMC Level 2 program, GCC High environment, and risk governance. This remote role with periodic onsite support reports to the President and Executive Leadership Team and requires ~20–40 hours monthly.

The CIO will own CMMC compliance posture, oversee SSP, POA&M, risk register, and coordinate with C3PAOs and external partners.