Project Manager: CMMC Audit

Cyderes; United States; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid work model

Medical insurance

Retirement match

PTO & sick leave

Professional development

LinkedIn Learning

Mobile stipend

Job summary

Cyderes is seeking an experienced Project Manager with CMMC knowledge to lead a United States Federal CMMC audit for a strategic, enterprise customer. You will own end-to-end delivery, manage timelines, and coordinate across Cyderes teams to ensure evidence is complete and accurate.

You will speak with customers about CMMC scoping, controls, and evidence standards, lead meetings and status sessions, and drive risk mitigation to a successful audit outcome.

Qualifications

• 5+ years of project management experience, preferably within cybersecurity, IT, consulting, or professional services.
• Working knowledge of the CMMC framework, including its maturity levels, control domains, and assessment/audit process.
• Prior experience supporting or coordinating a CMMC assessment, audit, or readiness effort — as a PM, coordinator, or adjacent role — strongly preferred.
• Proven experience managing complex, customer-facing technology projects from initiation through completion.
• Experience managing multiple concurrent projects, priorities, and cross-functional teams.
• Excellent customer-facing communication, presentation, organizational, and stakeholder-management skills, with the ability to translate technical CMMC requirements for non-technical stakeholders.
• Preferred: PMP certification; CMMC-related certification (e.g., CMMC RP/CCP/CCA); and experience within an MSSP, MDR/XDR provider, cybersecurity consulting firm, or security technology company.

Responsibilities

• Own end-to-end delivery of CMMC audit deliverables, applying knowledge of CMMC domains, practices, and assessment objectives to ensure all audit follow-up questions are answered accurately by the appropriate Cyderes team member(s).
• Develop and maintain planning documents, timelines, milestones, dependencies, resource plans, and delivery schedules aligned to CMMC assessment phases and evidence-collection requirements.
• Manage resources, risks, issues, dependencies, and change requests as encountered throughout the audit process, drawing on familiarity with common CMMC audit pitfalls and assessor expectations.
• Serve as the primary project-management contact for the customer on Cyderes' CMMC audit deliverables and overall support, able to speak knowledgeably to CMMC scoping, controls, and evidence standards.
• Participate in all meetings, recurring status sessions, and executive updates related to the CMMC audit activity, translating CMMC-specific requirements into clear project status and risk narratives for stakeholders.
• Coordinate cross-functional Cyderes teams — including cybersecurity consultants and engineers — to ensure CMMC evidence (SSPs, POA&Ms, artifacts, control mappings, etc.) is complete, accurate, and provided on time.
• Proactively identify delivery risks and blockers tied to CMMC audit requirements and drive timely resolution and escalation of Cyderes-related actions.
• Ensure project deliverables meet quality standards, customer expectations, and CMMC assessment criteria for everything Cyderes is accountable for providing.
• Lead project closeout, lessons learned, documentation, and transition activities, capturing insights to strengthen future CMMC engagements.

Skills

Project management

CMMC knowledge

Audit coordination

Education

Bachelor's degree or equivalent experience

Job description

We Help the World Be Everyday Ready™

Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

Great Place to Work® Certified™

About the Role

We are looking for an experienced Project Manager with working knowledge of the Cybersecurity Maturity Model Certification (CMMC) framework to manage all actions associated with a United States Federal CMMC audit for a strategic, enterprise customer. This Project Manager will bring familiarity with CMMC assessment processes, evidence requirements, and audit lifecycle stages, and will work closely with the customer and internal Cyderes colleagues to ensure all audit requirements are delivered on time, within scope, and to a high standard of quality. This individual will be accountable for attending all audit sessions, applying their understanding of CMMC assessment expectations to help ensure a successful outcome for everything Cyderes is required to support.

Responsibilities

• Own end-to-end delivery of CMMC audit deliverables, applying knowledge of CMMC domains, practices, and assessment objectives to ensure all audit follow-up questions are answered accurately by the appropriate Cyderes team member(s)
• Develop and maintain planning documents, timelines, milestones, dependencies, resource plans, and delivery schedules aligned to CMMC assessment phases and evidence-collection requirements
• Manage resources, risks, issues, dependencies, and change requests as encountered throughout the audit process, drawing on familiarity with common CMMC audit pitfalls and assessor expectations
• Serve as the primary project-management contact for the customer on Cyderes' CMMC audit deliverables and overall support, able to speak knowledgeably to CMMC scoping, controls, and evidence standards
• Participate in all meetings, recurring status sessions, and executive updates related to the CMMC audit activity, translating CMMC-specific requirements into clear project status and risk narratives for stakeholders
• Coordinate cross-functional Cyderes teams — including cybersecurity consultants and engineers — to ensure CMMC evidence (SSPs, POA&Ms, artifacts, control mappings, etc.) is complete, accurate, and provided on time
• Proactively identify delivery risks and blockers tied to CMMC audit requirements and drive timely resolution and escalation of Cyderes-related actions
• Ensure project deliverables meet quality standards, customer expectations, and CMMC assessment criteria for everything Cyderes is accountable for providing
• Lead project closeout, lessons learned, documentation, and transition activities, capturing insights to strengthen future CMMC engagements

Requirements

• Cybersecurity, Engineering, or a related field; equivalent experience considered
• 5+ years of project management experience, preferably within cybersecurity, IT, consulting, or professional services
• Working knowledge of the CMMC framework, including its maturity levels, control domains, and assessment/audit process, gained through direct project involvement, training, or certification
• Prior experience supporting or coordinating a CMMC assessment, audit, or readiness effort — as a PM, coordinator, or adjacent role — strongly preferred
• Proven experience managing complex, customer-facing technology projects from initiation through completion
• Experience managing multiple concurrent projects, priorities, and cross-functional teams
• Demonstrated ability to manage project scope, schedule, resources, risks, and dependencies in a compliance or audit-driven environment
• Excellent customer-facing communication, presentation, organizational, and stakeholder-management skills, with the ability to translate technical CMMC requirements for non-technical stakeholders
• Strong problem-solving skills with the ability to proactively identify and resolve delivery challenges
• Preferred: PMP certification; CMMC-related certification (e.g., CMMC Registered Practitioner (RP), Certified CMMC Professional (CCP), or Certified CMMC Assessor (CCA)); and experience within an MSSP, MDR/XDR provider, cybersecurity consulting firm, or security technology company

WHY CYDERES?

Benefits that go beyond the basics, we support our people so they can do their best work.

• Medical Insurance - Employee + dependents covered
• Life Insurance - Protection for what matters most
• Retirement Match Program - We invest in your future
• Hybrid Work Model - 2–3 days in office
• Maternity & Paternity Leave - Time for the moments that matter
• Paid Time Off - PTO + sick & casual leave
• Bereavement & Volunteer Time - Give back to your community
• Professional Development - Reimbursement program
• LinkedIn L&D Platform - Thousands of courses at your fingertips
• Mobile Phone Reimbursement - Stay connected, on us

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.