Independent Contractor – Clinical Trials Quality & Compliance Manager
Cardiovascular Associates of America - CVAUSA
Google Cloud Platform
Senior GRC Engineer – CMMC
Workstreet
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteJob Level
Senior
Tech Stack
AWSAzureCyber Security
About the role
- Analyze CMMC and NIST SP 800-171 controls to ensure client compliance with Department of Defense cybersecurity standards.
- Create and manage System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other required CMMC documentation.
- Perform readiness reviews to identify and address control deficiencies for organizations pursuing CMMC certification.
- Partner with clients to close cybersecurity gaps and achieve CMMC Level 1 and Level 2 compliance.
- Support clients through assessments and coordinate activities with Certified Third-Party Assessment Organizations (C3PAOs).
- Oversee multiple client engagements, ensuring milestones and deliverables are met ahead of contract deadlines.
- Mentor and guide a team of compliance professionals to achieve project goals and maintain quality standards.
- Stay informed on CMMC 2.0 developments and DoD cybersecurity policies to ensure client programs remain compliant.
Requirements
- 5+ years of experience in defense contractor compliance, CMMC, NIST 800-171, NIST 800-53, or FedRAMP implementation
- 3+ years of leadership experience managing or guiding a small team
- Deep understanding of CUI handling requirements and DFARS clauses (252.204-7012, 252.204-7019, 252.204-7020, 252.204-7021)
- Experience with NIST SP 800-171 control implementation and assessment
- Familiarity with DoD supply chain requirements and defense contractor workflows
- Experience working with small to mid-sized defense contractors
- Knowledge of common GCC High, Azure Government, or AWS GovCloud environments
- Ability to obtain U.S. public trust security clearance.
Benefits
- Health insurance
- 401(k) matching
- Flexible work hours
- Paid time off
- Remote work options
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
CMMCNIST SP 800-171NIST 800-53FedRAMPCUI handlingDFARS clausescontrol implementationassessmentcybersecurity complianceproject management
Soft skills
leadershipmentoringguidancecommunicationorganizational skillscollaborationproblem-solvingclient engagementquality assuranceteam management
Certifications
CMMC certificationU.S. public trust security clearance
