Grc And Cmmc Assessment Lead - Senior Manager

CFGI

United States
Not specified; not specified; competitive compensa...
**
Cmmc level 2 and level 3 assessment expertise
Nist sp 800-171 and 800-172 framework knowledge
Dfars clause compliance and supply chain flow-down
** CFGI is seeking a Senior Manager to lead GRC and CMMC assessment engagements, focusing on enhancing clients' cybersecurity governance and compliance posture. The ideal candidate should possess extensive experience in CMMC assessments and regulatory compliance, along with strong communication and leadership skills. **

Job Summary

  • This role requires leading end-to-end CMMC assessment and GRC engagements to strengthen client security governance and compliance posture.
  • The ideal candidate will possess deep expertise in NIST frameworks and DFARS clauses while managing teams across multiple client workstreams.
  • CFGI offers high-impact work with sophisticated private equity clients and an opportunity to shape a fast-growing Cybersecurity practice.

Matching Summary

Match Score: 75

** CFGI is seeking a Senior Manager to lead GRC and CMMC assessment engagements, focusing on enhancing clients' cybersecurity governance and compliance posture. The ideal candidate should possess extensive experience in CMMC assessments and regulatory compliance, along with strong communication and leadership skills. **

Salary

Not specified; Not specified; Competitive compensation and benefits mentioned

Skills & Requirements

Must-have

  • CMMC Level 2 and Level 3 assessment expertise
  • NIST SP 800-171 and 800-172 framework knowledge
  • DFARS clause compliance and supply chain flow-down
  • System Security Plan and POA&M development
  • Executive communication and stakeholder management

Nice-to-have

  • PE portfolio company experience in rapid maturity uplift
  • Incident readiness and tabletop exercise coordination
  • SOC 2 and ISO certification audit support
  • Privacy fundamentals intersecting with CUI handling
  • Cross-functional team leadership across multiple workstreams

Key Requirements

  • Eight plus years of relevant cybersecurity GRC or consulting experience
  • Bachelor's degree in a related field required
  • Hands-on CMMC assessment or readiness support experience strongly preferred
  • Certifications such as CCP, CCA, CISM, CISSP, CRISC, or CISA preferred

Work Rights

Not specified

Tailored Resume

Cover Letter