Enter a job title or keyword
CMMC Level 2 Project Manager
Job Location:
Job Location:
Blue Bell, PA - USA
Monthly Salary:
Not provided by the employer
Monthly Salary:
Posted:
25 June 2026 (30+ days ago)
Posted:
Application Deadline:
22 September 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Job Description
Must Have Technical/Functional Skills
The CMMC Level 2 Project Manager leads the planning coordination and execution of initiatives required to achieve and maintain Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance. This role partners across Information Security Infrastructure Application teams Legal HR Procurement and business stakeholders to deliver a structured compliance program aligned to NIST SP 800-171 requirements Controlled Unclassified Information (CUI) protection expectations assessment readiness and ongoing certification maintenance.
Key Responsibilities
Lead the end-to-end CMMC Level 2 program including scope definition project planning governance dependency management risk tracking issue resolution and executive reporting.
Coordinate cross-functional implementation of controls aligned to NIST SP 800-171 and CMMC Level 2 requirements for systems that store process or transmit CUI.
Develop and maintain the integrated project plan milestone schedule RAID log resource plan and status reporting cadence.
Partner with control owners to assess current-state maturity identify gaps prioritize remediation activities and track closure of deficiencies.
Drive development and maintenance of required compliance artifacts including policies procedures system security plans evidence inventories diagrams and assessment support documentation.
Coordinate readiness activities for internal reviews mock assessments self-assessments or C3PAO-led assessments including interview preparation and evidence validation.
Facilitate scoping decisions boundary definition enclave planning and system inventory alignment to support defensible assessment readiness.
Monitor POA&M items remediation timelines and control implementation progress to ensure readiness targets are met.
Support SPRS-related coordination affirmation preparation and documentation needed for ongoing compliance activities where applicable.
Manage vendor consultant and assessor engagement activities related to the compliance program.
Establish program governance forums and provide concise updates to leadership on schedule risks costs dependencies and certification readiness.
Promote sustainable compliance by embedding repeatable processes ownership clarity and continuous monitoring practices after certification.
Required Qualifications
Bachelors degree in Information Technology Cybersecurity Business Project Management or a related field or equivalent practical experience.
5 years of project or program management experience leading complex cross-functional initiatives.
Direct experience supporting CMMC 2.0 NIST SP 800-171 DFARS cybersecurity requirements or comparable regulated compliance programs.
Strong understanding of CMMC Level 2 expectations including protection of CUI assessment readiness evidence management and remediation planning.
Experience building and managing integrated project plans with multiple workstreams across technical and non-technical teams.
Demonstrated ability to manage risks dependencies budgets timelines and stakeholder communication in a highly regulated environment.
Strong written and verbal communication skills including the ability to translate technical compliance requirements into clear business actions.
Proficiency with project management methods reporting tools and governance processes.
Preferred Qualifications
PMP PRINCE2 Certified ScrumMaster or similar project management certification.
Experience working with defense contractors government suppliers or organizations handling CUI.
Familiarity with C3PAO assessment preparation SPRS submissions and continuous compliance practices.
Knowledge of related frameworks such as NIST SP 800-171A NIST SP 800-53 FedRAMP ISO 27001 or risk management frameworks.
Experience coordinating cybersecurity infrastructure identity endpoint and policy remediation workstreams.
Background in audit readiness compliance documentation or regulated control testing.
