Back to jobs
New

CMMC Compliance Specialist (Part-Time)

remote

                                     

CMMC Compliance Specialist (Part-Time)

Location: Remote
Employment Type: Part-Time Consulting
Reports To: President and Executive Leadership Team

Expected Time Commitment : Approximately 30-60 hours per month, depending on compliance activities and assessment schedule.

 

Position Overview

Horizon Industries is seeking an experienced Part-Time Compliance Specialist to provide executive leadership and operational oversight for the company’s Cybersecurity Maturity Model Certification (CMMC) Level 2 program and Microsoft GCC High environment. The person will serve as the executive owner of the organization's CMMC compliance posture, ensuring that cybersecurity controls, governance processes, technical implementations, risk management activities, and assessment preparation efforts remain compliant, sustainable, and audit-ready. This position is ideal for a technology executive with deep experience in NIST SP 800-171, CMMC, Microsoft GCC High, federal government contracting, and cybersecurity governance.

Key Responsibilities

Executive Leadership & Governance

  • Serve as Horizon's designated expert for all CMMC-related activities.
  • Act as executive owner of systems that process, store, or transmit Controlled Unclassified Information (CUI).
  • Ensure cybersecurity initiatives align with business objectives, contract requirements, and federal regulations.
  • Provide strategic technology guidance to executive leadership regarding compliance, security, and risk management.
  • Participate in executive compliance reviews and readiness briefings.
  • Support annual affirmations and executive attestations relating to CMMC certification readiness.

CMMC Program Oversight

  • Provide executive oversight of Horizon's CMMC Level 2 program.
  • Review and approve CMMC policies, procedures, plans, and compliance artifacts.
  • Ensure alignment among the System Security Plan (SSP), CUI Management Plan, POA&M, Risk Register, and supporting evidence repositories.
  • Review compliance metrics, remediation activities, and audit findings.
  • Support preparation for self-assessments, mock assessments, and formal C3PAO assessments.
  • Participate in assessor interviews and executive-level discussions during audits.

Technical & Security Oversight

  • Provide executive oversight of:
    • Microsoft GCC High environment
    • Entra ID / Identity & Access Management
    • Conditional Access and MFA
    • Endpoint security and device management
    • Security monitoring and incident response
    • Vulnerability management activities
    • Configuration and change management processes
  • Review security architecture and ensure alignment with CMMC control requirements.
  • Evaluate impacts of major technology changes on CMMC scope and security posture.

Risk Management

  • Lead annual and periodic cybersecurity risk assessments.
  • Review risk treatment decisions and approve risk acceptance recommendations.
  • Ensure corrective actions and remediation plans are effectively managed.
  • Provide governance oversight for POA&M development and closure activities.
  • Monitor compliance risks affecting certification status and federal contract eligibility.

Documentation & Audit Readiness

  • Review and approve:
    • System Security Plan (SSP)
    • Policies and Procedures
    • Continuous Monitoring Plan
    • Incident Response Documentation
    • Risk Assessment Reports
    • CUI Management Documentation
    • Evidence Management Processes
  • Ensure documentation accurately reflects implemented controls and operational practices.
  • Conduct periodic readiness reviews and executive quality checks on compliance artifacts.

 

Required Qualifications

  • Demonstrated experience supporting CMMC Level 2 or NIST SP 800-171 compliance programs.
  • Experience operating within DoD, federal contractor, or defense-industrial-base environments.
  • Strong working knowledge of:
    • Microsoft 365 GCC High
    • Entra ID
    • Microsoft Defender
    • Microsoft Purview
    • Microsoft Sentinel
    • Intune
    • Identity and Access Management

Preferred Qualifications

  • Previous experience serving as CIO, CISO, or equivalent executive role.
  • Successfully supported one or more organizations through CMMC certification.
  • Experience participating in DoD cybersecurity assessments.
  • Familiarity with DFARS 252.204-7012, 7019, 7020, and 7021.
  • Experience with SPRS submissions and executive affirmations.
  • Certifications such as:
    • CISSP
    • CISM
    • CGRC (formerly CAP)
    • CCSP
    • CMMC Certified Professional (CCP)
    • CMMC Certified Assessor (CCA)

Key Deliverables

The Part-Time Compliance Specialist will be expected to:

  1. Maintain executive oversight of Horizon's CMMC compliance program.
  2. Conduct monthly compliance governance reviews.
  3. Review and approve major compliance documentation.
  4. Provide quarterly executive risk assessments.
  5. Participate in internal audit and assessment preparations.
  6. Support executive readiness for C3PAO assessments.
  7. Validate SSP accuracy and compliance traceability.
  8. Advise leadership on cybersecurity investments, risk acceptance, and CMMC sustainment strategies.

This role is intended to provide Horizon with an experienced executive capable of serving as the reliable expert for CMMC compliance while leveraging existing internal resources for day-to-day administration and technical operations.

Horizon is an Equal Employment Opportunity employer, and it is our policy to consider all applicants for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.  

 

EOE/Vet/Disabled

 

 

 

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

 

At Horizon, we believe in a fair, transparent hiring process built on trust, integrity, and meaningful human connection. We invite you to review our AI Policy for Hiring and Recruitment to understand how we thoughtfully and responsibly use AI, while maintaining clear expectations for candidates on the appropriate use of AI throughout the recruitment journey.

Select...
Select...
Select...

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Horizon Industries’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.