CMMC Compliance Specialist (Part-Time)

Responsibilities

• Serve as the designated expert for all CMMC-related activities and executive owner of systems processing Controlled Unclassified Information (CUI)
• Provide executive oversight of the CMMC Level 2 program, reviewing and approving policies, procedures, and compliance artifacts
• Oversee the Microsoft GCC High environment, including Entra ID, Conditional Access, MFA, and endpoint security
• Lead annual and periodic cybersecurity risk assessments and manage POA&M development and closure
• Review and approve the System Security Plan (SSP), Continuous Monitoring Plan, and Incident Response Documentation
• Support preparation for self-assessments, mock assessments, and formal C3PAO assessments

Requirements

• Demonstrated experience supporting CMMC Level 2 or NIST SP 800-171 compliance programs
• Experience operating within DoD, federal contractor, or defense-industrial-base environments
• Strong working knowledge of Microsoft 365 GCC High, Entra ID, Microsoft Defender, Microsoft Purview, Microsoft Sentinel, and Intune

Preferred Qualifications

• Previous experience as a CIO, CISO, or equivalent executive role
• Experience successfully guiding organizations through CMMC certification
• Familiarity with DFARS 252.204-7012, 7019, 7020, and 7021
• Certifications such as CISSP, CISM, CGRC, CCSP, CCP, or CCA

About the Company

Horizon Industries is a federal contractor focusing on cybersecurity maturity and compliance within the defense-industrial base.