{"id":1675969,"url":"https://alion.io/job/systems-engineering-senior-cmmc-compliance-consultant","title":"Senior CMMC Compliance Consultant","company":{"id":2170006,"name":"Systems Engineering","domain":"systemsengineering.com","url":"https://alion.io/company/systemsengineering","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Portland, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"NIST 800-171","optional":false}],"status":"live","first_seen_at":"2026-10-01T13:46:52Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-23T14:40:36Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Description\nSystems Engineering has immediate availability for a Senior CMMC Compliance Consultant to join our growing Advisory Services team in Portland, Maine. This role leads clients through CMMC readiness, from initial scoping and CUI boundary definition through NIST SP 800-171 gap analysis, remediation planning, evidence development, and assessment preparation. While CMMC is a primary focus, the GRC consulting role supports clients across multiple industries, regulatory requirements, and cybersecurity frameworks.\nThe Senior CMMC Compliance Consultant serves as a trusted advisor to client executives and technical teams, helping them translate compliance requirements into practical security improvements while providing leadership, coaching, and quality oversight to the broader consulting team.\nThis is a hybrid role, which includes a mix of remote & onsite work at our Portland, Maine office as well as onsite client engagements which may require occasional travel.\nConsulting Scope:\nLead CMMC scoping, readiness, and NIST SP 800-171 gap assessments by identifying FCI and CUI, evaluating data flows, defining the assessment boundary, and documenting in-scope people, processes, technologies, facilities, and external service providers. Develop and maintain assessment-ready deliverables, including System Security Plans, policies, procedures, control narratives, Plans of Action and Milestones, boundary and data-flow documentation, and supporting evidence, while clearly communicating findings and risk to technical and executive stakeholders.\nInformation security program development and oversight.\nUtilizing Governance, Risk, and Compliance (GRC) tools to track and communicate compliance program status.\nParticipation or leadership on client security committees.\nCommunity and industry thought leadership.\nInternal organizational leadership.\nTechnology compliance consultants work with clients to ensure technology, compliance, and security are expertly managed through organizational policies, strategic IT planning, and at times taking ownership over roadmap execution. \nDuties and Responsibilities:\nLead clients through the development of security documentation, policies, and operating practices by facilitating decisions, establishing ownership, and coordinating work across client stakeholders and internal cross-functional teams, from operational staff to C-suite leaders.\nDirect the NIST 800-171 implementation process by confirming FCI and CUI flows, establishing the system boundary, and ensuring all relevant personnel, processes, technologies, facilities, and external service providers are accurately represented. Translate identified gaps into practical solution options, recommend an appropriate path forward, and coordinate with the technical resources responsible for implementation.\nLead GRC consulting engagements across multiple industries and regulatory environments. Develop and maintain information security, business continuity, cybersecurity workforce, and compliance programs; facilitate the creation and maintenance of business continuity plans and risk assessments; and identify gaps against applicable frameworks and client requirements.\nProvide strategic CISO-level consultation to clients. Work independently with clients to ensure an appropriate technology and security posture is developed and maintained. \nAssemble, analyze, and deliver comprehensive IT risk assessments documenting “State of the State” for clients and making appropriate recommendations. Provide guidance and context in prioritizing and determining complexity of cultural and technological problems. \nOversee remediation planning by defining required security and business continuity outcomes, evaluating proposed solutions, communicating residual risk, and confirming that completed work is supported by appropriate documentation and evidence.\nProvide internal training and mentorship. \nRequirements\nBS or similar degree with 8+ years of progressively responsible experience. Applicants without a degree may substitute additional experience, especially in leadership roles (10+ years expected).\nDemonstrated experience leading CMMC or NIST SP 800-171 readiness engagements, including scope definition, gap assessment, remediation planning, evidence review, and preparation for an external assessment.\nCMMC Certified Professional, CMMC Certified Assessor, CISSP, CISA, CRISC, or a comparable security or compliance certification is strongly preferred. Candidates without a current credential should demonstrate equivalent CMMC and NIST SP 800-171 experience and be willing to obtain an agreed certification after hire. Candidates with current credentials will be required to supply proof of credentials during the application process.\nStrong working knowledge of CMMC, NIST SP 800-171, common CUI environments, identity and access management, endpoint security, network security, logging and monitoring, vulnerability management, incident response, backup and recovery, and cloud security. Experience evaluating Microsoft 365, Azure, and related security configurations is strongly preferred.\nConsulting experience strongly preferred.\nAbility to distil complex technical information into broadly comprehensible concepts, and vice versa. \nMust be an excellent written and oral communicator.\nExperience with HIPAA, GLBA, PCI, GDPR and NIST compliance is a plus.\nProject management experience preferred.\nPassion for security, governance, compliance, and risk required!\nMeet hybrid work requirements - ability to work onsite at our Portland, Maine office and travel occasionally for onsite client engagements. Reliable transportation is required.\nOur Culture & Benefits\nThe employees of Systems Engineering are its most valuable resources who have collectively made Systems Engineering a Best Places to Work company in Maine for over a decade. We pride ourselves on delivering great outcomes for our culture, clients, and our community by cultivating a high-performing culture focused on continuous learning, collaboration, and community impact.\nOur headquarters is in Portland, Maine, where we're located in the heart of the Old Port in downtown Portland, positioned centrally to the waterfront, trails, parks, cultural events, and restaurants.\nCompensation & Pay Transparency Statement\nSystems Engineering offers a competitive compensation package that reflects both the market and the experience you have. Base salary will be discussed during the interview process and is complemented by a comprehensive benefits package, hybrid flexibility, and the opportunity to do high-impact work for our clients. Systems Engineering is committed to fair, equitable, and competitive pay, reviewed regularly to ensure internal alignment and market relevance.\nThe base salary range for this position is $110,000 to $125,000 per year.\nBenefits & Total Rewards\nIn addition to base pay, Systems Engineering supports people through benefits designed to sustain both work and life:\n Health & Wellbeing - Competitive medical, dental, & vision benefits, employer-paid life, short-term, and long-term disability insurance, 24/7 Employee Assistance Program (EAP), onsite fitness facilities, and wellness programs.\n Financial Wellbeing - Employer 401k matching contributions, short-term incentive plans (STIP), and free financial advising.\nTime & Flexibility - Paid Time Off starting with 17 days PTO, nine paid holidays, and hybrid work arrangements.\nFamily Support - Paid parental leave & dependent care FSA programs.\nProfessional Development & Growth Opportunities - Career mobility and professional development, with employer-supported training, learning, and certification opportunities, including tuition reimbursement benefits.\n Community & Culture - Paid community volunteer time, employer-charitable match programs, corporate golf membership, company-provided season tickets to local sports teams, employer provided parking, and regular company gatherings.\nDue to the nature of our business and the requirements of ITAR regulations, this role may require access to controlled information and technology. Candidates must be U.S. citizens or lawful permanent residents and be willing to undergo a thorough background check as part of the employment process.\nSystems Engineering values diversity and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other status protected by law.\nSalary Description\n$110,000-$125,000 annually, DOE","description_format":"text","description_chars":8624,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Continuous learning","Growth opportunities","Hybrid work","Parental leave","Professional development","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Industrial Engineering"],"lifecycle":[{"event":"open","at":"2026-10-02T08:31:49Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.796,"p_room":0.75,"age_days":21,"expected_fill_days":29,"reasons":["conf:2","win:late"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/systems-engineering-senior-cmmc-compliance-consultant","json_url":"https://alion.io/job/systems-engineering-senior-cmmc-compliance-consultant.json","meta":{"generated_at":"2026-10-23T17:22:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26371,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2170006},"rest":"https://alion.io/mcp/rest/get_company?id=2170006"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsystems-engineering-senior-cmmc-compliance-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsystems-engineering-senior-cmmc-compliance-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsystems-engineering-senior-cmmc-compliance-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/systems-engineering-senior-cmmc-compliance-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsystems-engineering-senior-cmmc-compliance-consultant"}]}