Senior Compliance Lead - Remote | CMMC & HIPAA Expert

ecfirst, Inc.; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

ecfirst, Inc. is seeking a Sr. Compliance Professional to lead and support compliance assessment, readiness, and program management across regulated industries.

You will design and maintain policies, guide remediation, and work with leadership to communicate risk to executives and technical teams. The role covers a wide range of frameworks including CMMC, NIST SP 800-171, HITRUST CSF, HIPAA, SOC 2, ISO 27001, and GDPR, with responsibilities spanning SSP/POA&M development, audits, and

Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, Law, Business or related field.
• 5+ years of experience in compliance, GRC, audit, or IT risk management roles.
• Hands-on experience leading assessments against CMMC Level 2 / NIST SP 800-171, HITRUST CSF, and HIPAA; working knowledge of SOC 2, NIST CSF / SP 800-53, ISO 27001, PCI DSS, GDPR, and CCPA.
• Experience developing SSPs, POA&Ms, risk registers, remediation plans, and policies.
• Experience managing projects or engagements, including scope, budgets, schedules, and multiple concurrent deliverables.

Responsibilities

• Develop, implement, and maintain compliance programs across frameworks and regulations (e.g., CMMC, NIST SP 800-171, NIST CSF / SP 800-53, HITRUST, HIPAA, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA).
• Perform risk assessments, gap analyses, and audits; maintain risk registers and remediation plans.
• Coordinate with stakeholders, assessors, and external auditors for readiness reviews, valid assessments, certifications, and reporting.
• Monitor regulatory and framework changes and advise leadership on evolving obligations.
• Develop and maintain security, privacy, and compliance policies aligned to requirements.
• Lead CMMC Level 2 readiness engagements, HITRUST, HIPAA risk assessments, and cross-framework advisory.

Skills

Regulatory compliance

Risk assessment

Communication to execs

Engagement management

Education

Bachelor's degree in Information Systems, Cybersecurity, Law, Business

Tools

MyCSF

Job description

ecfirst, Inc. is seeking a Sr. Compliance Professional to lead and support compliance assessment, readiness, and program management across regulated industries.

You will design and maintain policies, guide remediation, and work with leadership to communicate risk to executives and technical teams. The role covers a wide range of frameworks including CMMC, NIST SP 800-171, HITRUST CSF, HIPAA, SOC 2, ISO 27001, and GDPR, with responsibilities spanning SSP/POA&M development, audits, and