CMMC Compliance Specialist

CMMC Compliance Specialist (Contract)

Type: Contract (6+ months, open-ended)
Work model: Remote (with periodic travel to company sites, including occasional travel to Canada)
Pay: $75–$90/hr

Role overview

Hands-on individual contributor supporting a manufacturing organization to achieve and maintain CMMC Level 2 compliance. You will work directly with IT and business users to assess current practices, implement and document controls aligned to NIST SP 800-171, and establish a sustainable cadence for ongoing compliance and future external C3PAO assessments.

Responsibilities

• Partner with IT and business stakeholders to achieve and maintain CMMC Level 2 compliance
• Assess and document compliance against NIST SP 800-171 security controls
• Collect, organize, and maintain evidence for CMMC assessments
• Build compliance documentation including policies, procedures, templates, and process maps
• Work with users handling Controlled Unclassified Information (CUI) to validate processes and identify gaps
• Collaborate with networking and sysadmin teams to implement practical controls
• Track remediation actions, document findings, and provide clear status reporting
• Prepare the organization for external C3PAO assessments and support audit activities

Requirements

• Proven experience leading or supporting a successful CMMC Level 2 assessment with an external C3PAO
• Deep working knowledge of NIST SP 800-171 requirements and controls
• Strong technical foundation in systems administration, networking, or enterprise IT infrastructure
• Direct experience with CUI environments and the workflows of users handling protected data
• Experience building compliance documentation, evidence repositories, and process maps
• Solid project management, organizational, and reporting skills
• Ability to work independently with minimal supervision once up to speed

Nice to have

• Experience with compliance initiatives in a manufacturing environment
• Familiarity with DFARS, NIST 800-172, and broader DoD cybersecurity requirements
• Experience building governance processes for ongoing compliance after certification