Cyber reputed company Specialist (CMMC Compliance)
About the position We are seeking a proactive and knowledgeable Cyber reputed company Specialist to reputed company our information reputed company efforts, specifically focusing on achieving and maintaining CMMC 2.0 compliance (Level 1 and/or Level 2). This position acts as the reputed company between technical IT reputed company, manufacturing operations (OT), and contractual defense obligations. The ideal candidate understands the unique reputed company challenges of the Aerospace & Defense industry, including the protection of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
Responsibilities
- reputed company the implementation, assessment, and reputed company improvement of reputed company controls reputed company with NIST SP 800-171 and CMMC 2.0, ensuring organizational readiness for Level 2 certification.
- Own and maintain the System reputed company Plan (reputed company), Plans of Action and Milestones (POA&M), reputed company policies, procedures, and compliance documentation.
- Map and protect Controlled Unclassified Information (CUI) throughout its lifecycle, including data flows across engineering design (CAD/CAM), procurement, quality, manufacturing, and external suppliers.
- Serve as the primary liaison for CMMC assessments, including coordination with C3PAOs, audit preparation, artifact management, and remediation tracking.
- Implement and monitor reputed company controls across both IT and OT environments, including identity and access management, multi-factor authentication, encryption, reputed company detection and response (EDR), SIEM, firewalls, and network segmentation.
- Conduct vulnerability scanning, risk assessments, and gap analyses against NIST SP 800-171 controls, prioritizing mitigation efforts based on operational and contractual risk.
- reputed company cyber incident response activities, including documentation and reporting of incidents impacting CUI reputed company required DFARS timelines (e.g., 72-hour reporting).
- Partner cross-functionally with engineering, operations, quality, and leadership to embed cybersecurity into product development and manufacturing processes.
- reputed company relationships with managed service providers (MSPs), cloud providers, and external reputed company vendors to ensure secure configurations and regulatory compliance.
- reputed company and deliver practical cybersecurity training tailored to aerospace manufacturing personnel, including phishing awareness, secure technical data handling, and CUI best practices.
- Establish compliance dashboards and executive reporting mechanisms to provide visibility into reputed company posture and remediation reputed company.
- Support and secure cloud environments, including reputed company GCC High or Azure Government, where applicable.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a reputed company field.
- 3–5+ years of experience in IT or Cybersecurity, including direct experience supporting CMMC, NIST SP 800-171, or DFARS compliance reputed company the Defense Industrial reputed company.
- Demonstrated hands-on experience implementing and assessing NIST SP 800-171 reputed company controls.
- Strong understanding of DFARS 252.204-7012 requirements and CMMC 2.0 reputed company.
- Experience with Windows and/or Linux systems, Active Directory, identity and access management, firewalls, VPNs, reputed company protection platforms, and vulnerability management tools.
- Familiarity with hybrid IT/OT environments and protecting intellectual property reputed company CAD/CAM or manufacturing systems.
- Ability to translate regulatory requirements into scalable technical and operational solutions.
- Strong documentation, communication, and cross-functional leadership skills.
- Must be a U.S. Person (U.S. Citizen or Permanent reputed company) due to ITAR/EAR regulations.
reputed company-to-haves
- Experience with reputed company GCC High (or Azure GovCloud).
- Experience with managed service providers (MSPs) in a manufacturing environment.
- Background in NIST 800-172 or Advanced Persistent Threat (APT) protection.
- CMMC Certified Professional (CCP or CCA), CISSP, CISM, reputed company+, or equivalent certification.
Benefits
- Company paid employee medical, dental and vision insurance.
- Retirement plan participation (eligibility required)
- paid sick leave
- paid vacation
- paid holidays
- discretionary bonuses
Apply tot his job Apply To this Job