CMMC Program Manager

Job Title: CMMC Program Manager Location: St. Louis, Missouri Work Type: Onsite Role Employment Type: 06+ Months of Contract Domain: Cybersecurity / Compliance / Managed Security Services Position Overview We are seeking an experienced CMMC Program Manager to lead and manage cybersecurity compliance initiatives for clients operating within the Department of Defense (DoD) contractor ecosystem. The role will be responsible for overseeing Managed Security Services, guiding organizations through CMMC compliance readiness, and aligning cybersecurity programs with business objectives and regulatory requirements. Primary Responsibilities Manage and maintain client relationships from a Managed Security Services and CMMC compliance perspective, establishing clear goals and service expectations. Review CMMC readiness assessment findings and prioritize remediation efforts and security projects. Serve as liaison with external agencies and organizations for dissemination of security incidents and Computer Network Defense (CND) information. Onboard new customers and oversee their Cybersecurity and CMMC compliance programs through successful delivery of security services. Provide strategic security solutions aligned with the client’s business goals and risk posture. Coordinate and oversee ongoing security operations, compliance activities, and remediation planning. Ensure effective communication and reporting to stakeholders and executive leadership. Required Experience Enterprise Security Operations: Cyber threat landscape analysis Development of cybersecurity policies and security controls Risk reduction strategies Leading audit and compliance initiatives Disaster Recovery & Cyber Resiliency: Planning and implementing recovery procedures following cyber incidents or breaches Documentation & Governance: Creation and maintenance of policies across governance, risk management, incident response, HR security, and compliance domains Regulatory Compliance: Supporting organizations in meeting evolving cybersecurity and regulatory requirements Required Knowledge & Skills Strong understanding of DoD Government Contracting (GovCon) cybersecurity compliance requirements Hands-on knowledge of the following frameworks: DFARS NIST SP 800-171 NIST SP 800-53 CMMC (Cybersecurity Maturity Model Certification) Experience delivering Managed Security Services programs Excellent stakeholder management, communication, and leadership skills Education Bachelor’s or Master’s degree in Cybersecurity, Information Security, Information Systems, or a related field Advanced cybersecurity education or specialization preferred Preferred Certifications One or more of the following certifications strongly preferred: CISSP - Certified Information Systems Security Professional CISA - Certified Information Systems Auditor CISM - Certified Information Security Manager CGEIT - Certified in the Governance of Enterprise IT CRISC - Certified in Risk and Information Systems Control Vishal (Victor) Verma | Assistant Manager vishal@nsitsolutions.com NS IT Solutions www.nsitsolutions.com