Senior CMMC (FedRAMP) Compliance/Remediation Specialist

SRG; Conshohocken (Montgomery County); Remote; USD 110,000 - 124,000; Full time

Job summary

SRG is seeking a Sr. CMMC (FedRAMP) Compliance/Remediation Specialist for a remote, 2-year contract.

The role focuses on obtaining and maintaining CMMC certification, guiding remediation efforts, and coordinating with technical and business teams to close gaps within established timelines. The candidate will bring extensive government contracting experience and deep knowledge of DFARS 252.204-7012, NIST SP 800-171 Rev.

Qualifications

• Bachelor's degree in IT, Computer Science, Business Administration, or a related field.
• 7+ years of IT/information security compliance experience, preferably in a regulated industry.
• Significant government contracting experience.
• Hands-on experience with CMMC and/or FedRAMP, plus working knowledge of NIST SP 800-171 Rev. 2 and DFARS 252.204-7012.
• Demonstrated experience leading remediation and readiness efforts in compliant environments.
• Experience conducting security assessments or audits.
• Proficiency in risk assessment methodologies.

Responsibilities

• Lead the CMMC implementation plan with scope, objectives, timelines, and resourcing; maintain compliance docs including RMF/DSS, PPAs and related artifacts.
• Facilitate assessments of cybersecurity practices, policies, and controls against CMMC requirements.
• Identify gaps by comparing controls to CMMC/NIST 171-Rev.2; prioritize remediation recommendations.
• Develop and drive the strategy to achieve and sustain compliance with a risk-based remediation approach.
• Collaborate with application, infrastructure, and security teams to build remediation plans and advise on controls.
• Produce clear reports on findings, non-compliance areas, vulnerabilities, and remediation for technical and exec audiences.
• Develop and deliver training linking daily cybersecurity practices to CMMC requirements.
• Monitor regulatory changes and update controls and documentation accordingly.

Skills

7+ years experience

Govt contracting

CMMC FedRAMP

NIST SP 800-171

Remediation lead

Security assessments

Risk assessment

Communication

Teamwork

Education

Bachelor's degree

Job description

Sr. CMMC (FedRAMP) Compliance/Remediation Specialist - REMOTE!

Location

Conshohocken, PA

Employment type

2 year contract, W2

Compensation

$80-$90/hr

About the Role

Our client, a large organization in a regulated industry, is seeking an experienced CMMC Compliance Specialist to lead its Cybersecurity Maturity Model Certification (CMMC) effort. You will own the work of achieving and maintaining CMMC certification, which is essential to continuing and expanding the organization's business with federal agencies.

This is a hands-on, high-visibility role for someone who has stepped into environments with significant compliance gaps and driven them to a certification-ready state. You will assess current controls, build the remediation roadmap, and work with technical and business teams to close gaps against an established timeline.

You’ll bring significant government contracting experience and a deep understanding of DFARS 252.204-7012, NIST SP 800-171 Rev. 2, FedRAMP, and CMMC.

Key Responsibilities

• Program Planning: Partner with the Project Manager to build and execute a comprehensive CMMC implementation plan, including scope, objectives, timelines, and resourcing. Maintain all required compliance documentation, including risk assessments, System Security Plans, and Plans of Action and Milestones (POA&Ms).
• Assessment Facilitation: Lead assessments of cybersecurity practices, policies, and controls against CMMC requirements through documentation review, system owner interviews, and technical evaluation.
• Gap Analysis: Compare existing controls to CMMC and NIST SP 800-171 requirements, identify gaps, and prioritize recommendations to close them and reach certification.
• Compliance Strategy: Develop and drive the strategy to achieve and sustain compliance, including a risk-based approach to remediating deficiencies quickly and effectively.
• Remediation Guidance: Work with application, infrastructure, and security teams to build remediation plans, and advise on implementing appropriate controls and best practices.
• Reporting: Produce clear, detailed reports on findings, areas of non-compliance, vulnerabilities, and recommended remediation for both technical and executive audiences.
• Training and Awareness: Develop and deliver training sessions and workshops that connect everyday cybersecurity practices to CMMC requirements.
• Continuous Improvement: Track changes in regulations, standards, and the threat landscape, and keep controls and documentation current.

Required Qualifications

• Bachelor's degree in IT, Computer Science, Business Administration, or a related field
• 7+ years of experience in IT/information security compliance, risk management, or a related field, preferably in a regulated industry
• Significant government contracting experience
• Hands-on experience with CMMC and/or FedRAMP, along with working knowledge of NIST SP 800-171 Rev. 2 and DFARS 252.204-7012
• Demonstrated experience leading remediation and readiness efforts in environments with substantial compliance gaps
• Experience conducting security assessments or audits
• Proficiency in risk assessment methodologies
• Strong analytical skills, with the ability to identify vulnerabilities and recommend practical solutions
• Excellent communication skills, with the ability to work with stakeholders at all levels
• Ability to think strategically while maintaining strong attention to detail
• Ability to work independently and as part of a team

Preferred Qualifications

• Certifications such as Certified CMMC Professional (CCP), Certified CMMC Assessor (CCA), CISSP, CISM, or CEH
• Experience with FedRAMP authorization or continuous monitoring (a strong equivalent to direct CMMC experience, since CMMC is a relatively new framework)
• Prior experience preparing an organization for a formal third-party or C3PAO assessment

Equal-opportunity Statement

Impellam Group and its brands are equal-opportunity employers committed to diversity and inclusion. All qualified applicants will receive consideration without regard to race, color, religion, gender, sexual orientation, pregnancy or maternity, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application, interview process, pre-employment activity, and the performance of crucial job functions.

If you require additional disability considerations, modifications, or adjustments please let us know by contacting [e-mail] or fill out this form to request accommodations.