Quality & Compliance Manager — CMMC/ISO Specialist (Hybrid VA)

Horizon Industries; Vienna (VA); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Healthcare package (medical, dental, V

401k with company match after 90 days

Educational Assistance program

Paid Time off

Job summary

Horizon Industries in Vienna, VA, seeks a Quality & Compliance Manager to own enterprise certification programs including CMMI maturity levels, ISO standards, and CMMC/NIST SP 800-171 compliance. You will ensure audit readiness year-round and support proposals with certification evidence.

You will guide delivery teams on process requirements, manage internal audits, and report risks and status to senior leadership to strengthen our security posture.

Qualifications

• 7+ years in quality, compliance, or security program management.
• Experience with two or more of CMMI, ISO 9001, ISO 27001, CMMC/NIST SP 800-171.
• Experience supporting external audits or appraisals.
• Bachelor’s degree as stated.
• Strong writing skills for policies and proposals.

Responsibilities

• Own and maintain CMMI, ISO 9001, ISO 27001, and ISO 20000 certs.
• Lead CMMC Level 2 readiness and sustaiment: gap assessments, SSP, POA&Ms.
• Maintain the Quality Management System and Information Security Management System, including policies, procedures, and document control
• Plan and conduct internal audits; track findings and corrective actions to closure
• Support capture and proposal teams with certification evidence
• Coach program and project managers on process requirements and tailoring
• Report certification status, risks, and audit metrics to senior leadership
• Stay current on changes to CMMC, DFARS, and ISO/CMMI standards

Skills

Quality & Compliance Management

Federal IT experience

Strong writing skills

Education

Bachelor’s degree in Information Security, Engineering, Business, Quality Management, or related field

Tools

GRC tools

QMS tools

Job description

Horizon Industries in Vienna, VA, seeks a Quality & Compliance Manager to own enterprise certification programs including CMMI maturity levels, ISO standards, and CMMC/NIST SP 800-171 compliance. You will ensure audit readiness year-round and support proposals with certification evidence.

You will guide delivery teams on process requirements, manage internal audits, and report risks and status to senior leadership to strengthen our security posture.