Senior Manager – CMMC Assessments & IT Risk Advisory

The Role

A top-tier professional services firm is seeking a Senior Manager or Manager to lead CMMC assessment engagements and (ITGC) audits within its growing Cybersecurity and Technology Risk practice. This is a client-facing, billable leadership role with direct responsibility for delivery quality, team development, and practice growth.

What You'll Do

• Lead end-to-end CMMC Level 2 assessments for clients across the DIB.
• Direct ITGC audit programs spanning access management, change management, computer operations, and SDLC controls across complex client environments
• Apply NIST SP 800-171/172, CMMC 2.0, and relevant IT audit frameworks (COSO, COBIT) to identify control gaps and drive remediation
• Serve as senior point of contact for executive and board-level stakeholders, translating technical findings into business risk language
• Build and mentor a high-performing team across cybersecurity and IT audit disciplines
• Contribute to BD pipeline through market presence, client relationships, and thought leadership in the CMMC/GRC space

What You Bring

• 7+ years in cybersecurity, IT audit, or compliance advisory, ideally within professional services.
• Hands-on CMMC assessment experience; C3PAO background strongly preferred
• Deep ITGC audit competency across SOC, internal audit, or regulatory frameworks
• An active CMMC Certified Assessor (CCA) cert is required; CISA, CISSP, or CRISC a strong plus
• Proven ability to manage engagements, develop client relationships and manage senior client relationships.

Compensation

Base salary $175,000–$240,000 depending on experience, plus performance bonus, flexible hybrid working, and full benefits package.

If you're curious to learn more, apply today. All applications will be treated in strict confidence.