IT & Cybersecurity Specialist - CMMC Compliance

The IT & Cybersecurity Specialist will be responsible for managing the company’s IT systems, cybersecurity controls, user support, and compliance activities. This individual will take ownership of the technical and administrative work required to implement, document, and maintain the cybersecurity requirements applicable to our Department of Defense (DoD) contracts., IT Operations and Technical Support

• Manage and maintain computers, servers, networks, user accounts, software, and IT equipment.
• Provide technical support to employees, troubleshoot hardware and software issues, and manage onboarding and offboarding.
• Administer Microsoft 365, email security, endpoint protection, access controls, backups, and software updates, as applicable.
• Implement and maintain multifactor authentication, least-privilege access, patch management, and endpoint security.
• Manage IT vendors, licenses, equipment inventory, and technology-related documentation.

Cybersecurity and CMMC Compliance

• Lead and coordinate the company’s CMMC compliance and certification efforts.
• Implement and maintain applicable NIST SP 800-171 security requirements and related CMMC controls.
• Conduct gap assessments, maintain the System Security Plan (SSP), develop and update policies and procedures, and manage the Plan of Action and Milestones (POA&M), where applicable.
• Collect and maintain evidence demonstrating the implementation and effectiveness of security controls.
• Support risk assessments, vulnerability management, incident response, security awareness training, and continuous monitoring.
• Coordinate with management, external cybersecurity consultants, assessors, and other stakeholders to prepare for CMMC assessments.
• Help ensure that Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) are handled and protected appropriately.
• Monitor changes in DoD cybersecurity requirements and maintain compliance with applicable contractual obligations.

Security and Compliance Administration

• Support compliance with applicable DoD, contractual, and export-control requirements.
• Maintain cybersecurity records, incident documentation, access reviews, and audit evidence.
• Establish and maintain practical cybersecurity processes suitable for a small defense contractor.

The ideal candidate has practical experience with CMMC, NIST SP 800-171, and the requirements applicable to defense contractors, along with the ability to manage everyday IT operations for a small engineering company., * Experience in IT administration, cybersecurity, or information systems.

• Hands-on knowledge of CMMC requirements and NIST SP 800-171.
• Experience implementing cybersecurity controls and preparing compliance documentation and assessment evidence.
• Knowledge of network security, endpoint protection, identity and access management, backups, and vulnerability management.
• Strong troubleshooting, documentation, organization, and communication skills.
• Ability to work independently and take ownership of IT and cybersecurity responsibilities.
• U.S. citizenship and eligibility to obtain a U.S. government security clearance, as required for the position and applicable contract.

Preferred Qualifications

• Previous experience supporting a DoD contractor or defense industry organization.
• Experience preparing for a CMMC assessment or supporting a C3PAO assessment.
• Relevant certifications such as Security+, CISSP, CISM, CCSP, or equivalent cybersecurity credentials.
• Microsoft 365 administration and security experience.
• Experience with NIST SP 800-171 assessments, CUI environments, and security documentation.
• Familiarity with DFARS cybersecurity clauses and applicable federal contracting requirements.

• 401(k)
• 401(k) matching
• Paid time off
• Retirement plan