Responsibilities:
- Lead CMMC policy development across all 14 domains and manage POA&Ms end-to-end.
- Run compliance sprints with 5-10 clients, ensuring clear ownership and audit-ready documentation.
- Manage GRC platform tools and client progress dashboards to track compliance status.
Qualifications:
- Must have 3-5 years in cybersecurity GRC, IT audit, or information assurance with deep NIST 800-171 and CMMC knowledge.
- Requires Security+ certification, strong technical writing skills, and the ability to manage multiple clients simultaneously.
- U.S. Citizenship is a mandatory requirement for this role.
Work Environment:
- This is a fully remote, full-time position operating within U.S. time zones with no travel required.
- The role involves heavy documentation workflows and GRC platforms, focusing on turning complex systems into compliant environments.
- You will have clear ownership of client outcomes and documentation from day one, working on real CMMC audits.
Urrly
Urrly is a government contracting (GovCon) consulting firm specializing in cybersecurity compliance. It is a scaling team that values fairness and uses AI to ensure objective hiring practices.