Senior CMMC Compliance Consultant

Systems Engineering; Portland (ME); Hybrid; USD 130.000 - 170.000; Vollzeit

Zusammenfassung

Systems Engineering in Portland, ME seeks a Senior CMMC Compliance Consultant to guide clients through readiness, scoping, and gap analysis under NIST SP 800-171. You will define boundaries, document in-scope items, and develop evidence for assessments.

You will lead information security program development, use GRC tools to track status, and participate in client security committees, mentoring the advisory team while delivering practical security improvements.

Qualifikationen

• Experience with CMMC readiness and gap analyses.
• Ability to translate regulatory requirements into actionable security improvements.
• Leadership and mentorship within a consulting team.

Aufgaben

• Lead CMMC scoping, readiness, and NIST SP 800-171 gap assessments.
• Develop and maintain assessment deliverables and evidence.
• Support information security program development and governance.

Kenntnisse

CMMC compliance

NIST SP 800-171

GRC tooling

Jobbeschreibung

Description

Systems Engineering has immediate availability for a Senior CMMC Compliance Consultant to join our growing Advisory Services team in Portland, Maine. This role leads clients through CMMC readiness, from initial scoping and CUI boundary definition through NIST SP 800-171 gap analysis, remediation planning, evidence development, and assessment preparation. While CMMC is a primary focus, the GRC consulting role supports clients across multiple industries, regulatory requirements, and cybersecurity frameworks.

The Senior CMMC Compliance Consultant serves as a trusted advisor to client executives and technical teams, helping them translate compliance requirements into practical security improvements while providing leadership, coaching, and quality oversight to the broader consulting team.

This is a hybrid role, which includes a mix of remote & onsite work at our Portland, Maine office as well as onsite client engagements which may require occasional travel.

Consulting Scope:

• Lead CMMC scoping, readiness, and NIST SP 800-171 gap assessments by identifying FCI and CUI, evaluating data flows, defining the assessment boundary, and documenting in-scope people, processes, technologies, facilities, and external service providers. Develop and maintain assessment-ready deliverables, including System Security Plans, policies, procedures, control narratives, Plans of Action and Milestones, boundary and data-flow documentation, and supporting evidence, while clearly communicating findings and risk to technical and executive stakeholders.


• Information security program development and oversight.


• Utilizing Governance, Risk, and Compliance (GRC) tools to track and communicate compliance program status.


• Participation or leadership on client security committees.


• Community and industry thought leadership.


• Internal organizational leadership.


• Technology compliance consultants work with clients to ensure technology, compliance, and security are expertly managed through organizational policies, strategic IT planning, and at times taking ownership over roadmap execution.