CMMC Implementation Specialist (Open Internal Only)

Job Summary:

The CMMC Implementation Specialist is responsible for planning, coordinating, and leading the organization's implementation of the Cybersecurity Maturity Model Certification (CMMC) program. Working collaboratively with Information Technology, Information Security, Human Resources, Legal, Contracts, Facilities, Operations, and other business stakeholders, this role serves as the central project coordinator for the organization's CMMC Level 2 implementation and assessment readiness efforts.

The specialist manages project plans, coordinates cross-functional workstreams, tracks implementation progress, organizes required documentation, and helps prepare the organization for third-party CMMC assessments. This role is ideal for a strong project manager who enjoys bringing people together, driving accountability, and keeping complex initiatives moving forward.

Key Responsibilities:

• Lead and coordinate the organization's CMMC implementation project from planning through CMMC Level 2 assessment readiness.


• Manage implementation plans, project schedules, milestones, remediation activities, risks, and status reporting while ensuring project objectives remain on track.


• Coordinate cross-functional implementation efforts involving Information Technology, Information Security, Human Resources, Legal, Contracts, Facilities, Operations, and other business stakeholders.


• Coordinate gap assessments against CMMC Level 2 and NIST SP 800-171 requirements and facilitate remediation planning and completion.

• Develop, review, organize, and maintain cybersecurity policies, procedures, standards, implementation documentation, and required compliance artifacts, including SSPs, POA&Ms, risk assessments, asset inventories, training documentation, and evidence repositories.


• Partner with technical teams to validate implementation of required security controls and prepare the organization for internal readiness reviews and third-party CMMC assessments.


• Communicate project progress, implementation risks, and recommendations to leadership while facilitating collaboration and accountability across project teams.


• Coordinate security awareness initiatives, support vendor and third-party compliance activities, remain current on evolving CMMC and NIST requirements, and contribute to continuous improvement of the organization's cybersecurity compliance program.


• Perform other duties as assigned.

Required Qualifications:

Education & Certifications: 

• Bachelor's degree in Business, Project Management, Information Technology, Cybersecurity, Compliance, or a related field, or an equivalent combination of education and professional experience.


• Project Management Professional (PMP) or related certificate preferred.

Technical Proficiency: 

• Proficient in Microsoft Office Suite, including Excel, Word, Outlook, and PowerPoint.


• Experience using project management, collaboration, or documentation management tools.

Experience:

• Three (3) or more years of experience in project management, program management, compliance, technology, cybersecurity, operations, or a related field.


• Experience coordinating complex cross-functional initiatives involving multiple stakeholders.


• Demonstrated ability to manage multiple priorities, meet deadlines, and drive projects to successful completion.


• Strong organizational, analytical, written, verbal, and interpersonal communication skills.

Preferred Skills and Qualifications:

• Familiarity with cybersecurity, compliance, governance, audit, or risk management initiatives.


• Familiarity with the CMMC framework, NIST SP 800-171, or other regulatory or compliance frameworks, or the ability to research.


• Experience developing policies, procedures, or compliance documentation.


• Experience supporting audits, assessments, or regulated environments, including Department of Defense (DoD) contractors.

EOE | Disability/Veterans