Sr. CMMC (FedRAMP) Compliance/Remediation Specialist - REMOTE!

Location: Conshohocken, PA
Employment type: 2 year contract, W2
Compensation: $80-$90/hr

About the Role

Our client, a large organization in a regulated industry, is seeking an experienced CMMC Compliance Specialist to lead its Cybersecurity Maturity Model Certification (CMMC) effort. You will own the work of achieving and maintaining CMMC certification, which is essential to continuing and expanding the organization's business with federal agencies.

This is a hands-on, high-visibility role for someone who has stepped into environments with significant compliance gaps and driven them to a certification-ready state. You will assess current controls, build the remediation roadmap, and work with technical and business teams to close gaps against an established timeline.

You'll bring significant government contracting experience and a deep understanding of DFARS 252.204-7012, NIST SP 800-171 Rev. 2, FedRAMP, and CMMC.

Key Responsibilities

• Program Planning: Partner with the Project Manager to build and execute a comprehensive CMMC implementation plan, including scope, objectives, timelines, and resourcing. Maintain all required compliance documentation, including risk assessments, System Security Plans, and Plans of Action and Milestones (POA&Ms).
• Assessment Facilitation: Lead assessments of cybersecurity practices, policies, and controls against CMMC requirements through documentation review, system owner interviews, and technical evaluation.
• Gap Analysis: Compare existing controls to CMMC and NIST SP 800-171 requirements, identify gaps, and prioritize recommendations to close them and reach certification.
• Compliance Strategy: Develop and drive the strategy to achieve and sustain compliance, including a risk-based approach to remediating deficiencies quickly and effectively.
• Remediation Guidance: Work with application, infrastructure, and security teams to build remediation plans, and advise on implementing appropriate controls and best practices.
• Reporting: Produce clear, detailed reports on findings, areas of non-compliance, vulnerabilities, and recommended remediation for both technical and executive audiences.
• Training and Awareness: Develop and deliver training sessions and workshops that connect everyday cybersecurity practices to CMMC requirements.
• Continuous Improvement: Track changes in regulations, standards, and the threat landscape, and keep controls and documentation current.

Required Qualifications

• Bachelor's degree in IT, Computer Science, Business Administration, or a related field
• 7+ years of experience in IT/information security compliance, risk management, or a related field, preferably in a regulated industry
• Significant government contracting experience
• Hands-on experience with CMMC and/or FedRAMP, along with working knowledge of NIST SP 800-171 Rev. 2 and DFARS 252.204-7012
• Demonstrated experience leading remediation and readiness efforts in environments with substantial compliance gaps
• Experience conducting security assessments or audits
• Proficiency in risk assessment methodologies
• Strong analytical skills, with the ability to identify vulnerabilities and recommend practical solutions
• Excellent communication skills, with the ability to work with stakeholders at all levels
• Ability to think strategically while maintaining strong attention to detail
• Ability to work independently and as part of a team

Preferred Qualifications

• Certifications such as Certified CMMC Professional (CCP), Certified CMMC Assessor (CCA), CISSP, CISM, or CEH
• Experience with FedRAMP authorization or continuous monitoring (a strong equivalent to direct CMMC experience, since CMMC is a relatively new framework)
• Prior experience preparing an organization for a formal third-party or C3PAO assessment

Impellam Group and its brands are equal-opportunity employers committed to diversity and inclusion. All qualified applicants will receive consideration without regard to race, color, religion, gender, sexual orientation, pregnancy or maternity, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application, interview process, pre-employment activity, and the performance of crucial job functions.

If you require additional disability considerations, modifications, or adjustments please let us know by contacting HR-InfoImpellamNA@impellam.com or fill out this form to request accommodations.