CMMC Manager

CareerCircle
McLean, VA, United States
4 days ago
Apply on www.careercircle.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$150,000.0 - $180,000.0
Working hours
Regular working hours

Tech stack

Microsoft Windows Cloud Computing Configuration Management Cyber Security Identity and Access Management Information Technology Operations Networking Hardware Microsoft Office Operational Data Store Power BI Azure Active Directory Cloud Services
+10 more
Phishing Runbook Software Licensing Storage Devices Microsoft InTune Information Technology Tools for Reporting Hardware Asset Management 3-tier Architectures Servicenow

Job description

The CMMC Manager oversees daily IT operations and leads the organization’s efforts to maintain secure, compliant, and reliable technology environments. This role combines hands-on technical support with strategic leadership, ensuring that IT services, infrastructure, and cybersecurity controls effectively support business needs and compliance requirements, including CMMC Level 2 and NIST 800-171. The CMMC Manager partners closely with internal teams and external providers to drive continuous improvement, manage risk, and deliver a high-quality end-user experience., * Manage daily IT operations, including help desk performance, ticket prioritization, escalations, service levels, and timely resolution of incidents and requests.

  • Own technical issues from identification through closure, ensuring appropriate follow-up, clear communication, and thorough documentation.
  • Provide hands-on Tier 2 and Tier 3 technical support, troubleshooting complex or recurring technology issues, identifying root causes, and implementing sustainable solutions.
  • Lead, coach, and develop internal IT team members, providing guidance, feedback, and support to build a high-performing team.
  • Coordinate effectively with external IT and cybersecurity partners to ensure aligned priorities, timely execution, and consistent service quality.
  • Manage Microsoft 365, cloud applications, endpoints, networks, infrastructure, and other corporate technology platforms to ensure stability, security, and performance.
  • Identify gaps in IT operations, systems, processes, documentation, and controls, and develop scalable solutions to address them.
  • Drive operational and process improvements from planning through completion, ensuring adoption, documentation, and continuous refinement.
  • Lead technology projects, implementations, integrations, hardware refreshes, and other IT initiatives, establishing clear priorities, ownership, timelines, and follow-through.
  • Support and maintain CMMC Level 2 and NIST 800-171 compliance and certification readiness, including implementation and maintenance of technical controls and related documentation.
  • Coordinate remediation activities with cybersecurity partners and internal stakeholders to address audit findings, vulnerabilities, and control deficiencies.
  • Monitor cybersecurity risks in collaboration with the managed security service provider and other partners, and address vulnerabilities, incidents, and corrective actions in a timely manner.
  • Manage IT assets and software licensing, ensuring accurate inventory, compliance, and lifecycle planning.
  • Oversee vendor relationships, contracts, and renewals, ensuring services and solutions align with business needs and budget constraints.
  • Manage technology budgets, balancing cost-effectiveness with reliability, security, and scalability.
  • Partner with business and operational teams to understand their needs, bridge technology gaps, and implement practical solutions that improve the end-user experience.
  • Anticipate future technology, infrastructure, and support needs, identifying risks and recurring issues and developing actionable plans to address them.
  • Support remote and hybrid personnel by ensuring robust, secure, and user-friendly access to cloud-based tools and resources., The CMMC Manager works in a modern, cloud-first technology environment centered on Microsoft 365 and related cloud applications. The role involves managing and supporting endpoints, networks, and infrastructure for a mid-sized user base, including remote and hybrid personnel. You will collaborate closely with internal business teams, an internal IT staff, and external IT and cybersecurity partners, including a managed security service provider. The environment emphasizes structured processes, documentation, and continuous improvement, with a strong focus on cybersecurity, compliance with CMMC Level 2 and NIST 800-171, and reliable service delivery. Work typically involves a combination of project-based initiatives and day-to-day operational support, requiring effective prioritization, clear communication, and a high level of ownership., Planning Auditing Power BI Equities Dashboard Timelines Operations Leadership Management ServiceNow Investments Procurement Forecasting Market Data

Requirements

Planning Auditing NIST 800 Phishing Timelines Accounting Scalability Reliability Procurement Coordinating Supply Chain Communication Microsoft 365 Accountability Cyber Security Prioritization Detail Oriented Problem Solving Technical Issues Critical Thinking Technical Support Help Desk Support Solution-Oriented Strategic Thinking Cloud Applications Software Licensing Process Improvement Strategic Leadership IT Service Management Government Contracting Tier 3 Technical Support Cybersecurity Compliance Balancing (Ledger/Billing) Standard Operating Procedure Employee Assistance Programs Continuous Improvement Process Vendor Relationship Management Information Technology Operations Troubleshooting (Problem Solving) Information Technology Infrastructure Library Microsoft Intune (Mobile Device Management Software), * Minimum of 10 years of relevant technical IT experience.

  • 3-5 years of experience leading and managing an IT team.
  • Prior experience working in a cloud-first workplace productivity environment for a mid-sized company (approximately 150 to 300+ users).
  • Experience supporting remote and hybrid personnel in a cloud-first environment.
  • Prior experience supporting NIST 800-171 and CMMC Level 2 compliance and certification readiness.
  • Strong problem-solving and critical-thinking skills, with the ability to analyze complex issues, identify root causes, and implement practical solutions.
  • Proven ability to identify operational gaps, establish processes, and drive initiatives from planning through implementation and follow-through.
  • Strong attention to detail with the ability to think strategically, prioritize effectively, and plan for longer-term technology needs.
  • Excellent interpersonal and communication skills, with a proactive, solutions-oriented approach.
  • Demonstrated record of ownership, accountability, dependability, and follow-through.
  • Hands-on experience managing Microsoft 365 environments.
  • Experience managing endpoints, networks, infrastructure, and corporate technology platforms.
  • Experience coordinating with external IT and cybersecurity partners.
  • Experience providing Tier 2 and Tier 3 technical support and troubleshooting complex issues.

Additional Skills & Qualifications

  • Prior experience working with a federal government contractor in a Microsoft 365 GCC or GCC High environment.
  • Prior experience supporting NIST 800-171 and CMMC Level 2 compliance and certification readiness in a regulated or government contracting context.
  • Experience working with Microsoft Intune for endpoint management.
  • Experience working with Microsoft Entra for identity and access management.
  • Experience creating standard operating procedures and developing runbooks in an IT service management (ITSM) platform.
  • ITIL certification and/or experience implementing and executing ITIL-based practices and processes.
  • Cybersecurity experience, including identifying and responding to potential security issues, vulnerabilities, phishing attempts, and suspicious activity.
  • Experience leading technology projects, implementations, integrations, and hardware refreshes.
  • Experience managing IT assets, software licensing, vendor relationships, and technology budgets., NIST 800 Phishing Timelines Accounting Scalability Reliability Procurement Coordinating Supply Chain Communication Microsoft 365 Accountability Cyber Security Prioritization Detail Oriented Problem Solving Technical Issues Critical Thinking Technical Support Help Desk Support Solution-Oriented Strategic Thinking Cloud Applications Software Licensing Process Improvement Strategic Leadership IT Service Management Government Contracting Tier 3 Technical Support Cybersecurity Compliance Balancing (Ledger/Billing) Standard Operating Procedure Employee Assistance Programs Continuous Improvement Process Vendor Relationship Management Information Technology Operations Troubleshooting (Problem Solving), User Experience (UX) Online Communication IT Service Management Strategic Partnership Information Technology Operational Data Store Effective Communication Strategic Communication Communication Strategies Communications Management Verbal Communication Skills Preparing Executive Summaries Continuous Improvement Process Network Quality Of Service (QoS), Cyber Security Prioritization Cycle Counting Problem Solving Law Enforcement Storage Devices Ancient History Microsoft Office Asset Management Product Roadmaps Operational Risk Inventory Control Primary Authority Physical Inventory Inventory Analysis Process Improvement Networking Hardware Property Management IT Asset Management Property Inspection Reporting Solutions Lifecycle Management IT Service Management Organizational Skills Acquisition Processes Packaging And Labeling Information Technology Discrepancy Resolution Supply Chain Management Configuration Management Hardware Asset Management Certified Property Manager Verbal Communication Skills ITIL Foundation Certification Continuous Improvement Process BMC Remedy Action Request System Health and Hygiene Compliance Management Information Technology Infrastructure Library Certified Hardware Asset Management Professional (CHAMP) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance)

Benefits & conditions

This is a Permanent position based out of McLean, VA. Pay and Benefits

The pay range for this position is $150000.00 - $180000.00/yr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Medical insurance Dental & vision HSA/FSA options 401(k) Life insurance Short- and long-term disability Paid parental leave Paid vacation/PTO Paid holidays Bereavement leave Tuition assistance/reimbursement Professional development & conferences Employee Assistance Program (EAP) Wellness programs Company-sponsored events/outings Customized career-development tracks Workplace Type, Operations Leadership Management Innovation Journalism Newsletters Market Data Social Media Communication Cyber Security Public Affairs Decision Making Ancient History Customer Service Public Relations Secret Clearance Operations Security

About the company

Aston Carter provides world-class corporate talent solutions to thousands of clients across the globe. Specialized in accounting, finance, human resources, talent acquisition, procurement, supply chain and select administrative professions, we extend the capabilities of industry-leading companies. We draw on our deep recruiting expertise and expansive network to meet the evolving needs of our clients and talent community with agility and excellence. With offices across the U.S., Canada, Asia Pacific and Europe, Aston Carter serves many of the Fortune 500. We are proud to be a ClearlyRated Best of Staffing® Platinum Award winner for both client and talent service.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careercircle.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:50 min

Introduction and the value of runbooks

Hila Fish · World Congress 2023

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa · LIVE

1:24 min

Moving the semantic layer upstream to avoid vendor lock-in

Piotr Menclewicz Piotr Menclewicz · Europe 2026 Virtual

1:33 min

Recapping vital capability shifts across security and enterprise infrastructure

Sergej Reznik Sergej Reznik · Europe 2026 Virtual

1:32 min

Structuring automated incident workflows between runbooks and raw models

Aram Hakobyan Aram Hakobyan +1 · World Congress 2026 Europe

3:46 min

Navigating a career in cloud transformation consulting

Piet Van Dongen · LIVE

Videos

See all

Related articles

See all