DBT Sr. PM CMMC Specialist

Worker Type

Regular

The Senior Program Manager – Enterprise CMMC is responsible for leading the organization’s end-to-end Cybersecurity Maturity Model Certification (CMMC) program, ensuring enterprise-wide certification readiness and sustained compliance. This role drives coordination across all business functions—including CIO, Facilities, Security, HR and other departments to implement required practices, mature organizational controls, and achieve certification objectives.

The position serves as the central program authority for CMMC planning, execution, and governance, translating regulatory requirements into structured enterprise initiatives while ensuring cross-functional alignment, accountability, and measurable progress toward certification and sustainment.

• Lead the enterprise-wide CMMC program strategy, roadmap, and execution plan to achieve and sustain required certification levels.
• Serve as the central program authority for CMMC implementation across all CIO-owned systems, applications, infrastructure, and enterprise business functions handling CUI.
• Own end-to-end program delivery including scope, integrated master schedule, milestones, dependencies, risks, financials, and certification readiness outcomes.
• Interpret CMMC practices and objectives and translate requirements into structured, actionable work streams across IT, Engineering, Facilities, HR, Operations, Supply Chain, and other impacted departments.
• Drive enterprise scoping activities including CUI identification, asset inventory validation, boundary definition, and data flow mapping.
• Oversee implementation and validation of required technical, administrative, and physical controls to meet CMMC standards.
• Establish and govern structured evidence and artifact management processes to support third-party assessment readiness and ongoing sustainment.
• Coordinate internal readiness reviews, mock assessments, gap analyses, and remediation efforts in preparation for C3
  
  PAO evaluations.
• Monitor enterprise compliance posture, Plan of Action & Milestones (POA&M) tracking, remediation progress, and control maturity improvements.
• Provide executive-level reporting and decision support to the CIO and senior leadership regarding certification status, risks, resource needs, and contractual exposure.
• Drive cross-functional accountability for policy development, procedure updates, and operational changes required to meet CMMC requirements.
• Integrate organizational change management practices to ensure adoption of new controls, processes, and behavioral expectations across departments.
• Develop enterprise-wide communication strategies to ensure role-based awareness of CMMC responsibilities and compliance expectations.
• Partner with Learning & Development to design and track CMMC-related training and awareness initiatives.
• Identify and mitigate enterprise risks that could impact certification timelines, assessment outcomes, or contract eligibility.
• Manage relationships with external advisors, consultants, and assessors supporting CMMC readiness and certification activities.
• Establish governance structures and continuous monitoring processes to ensure long-term certification sustainment and audit preparedness.

• Bachelor’s degree in Information Systems, Engineering, Business, Compliance, or related field (or equivalent combination of education and experience).
• 12–15 years of experience leading complex, enterprise-scale programs with cross-functional scope and executive visibility.
• Direct experience supporting CMMC, NIST SP 800-171, or similar regulatory frameworks in a DoD-regulated or highly controlled environment.
• Demonstrated success leading enterprise-wide certification or regulatory readiness efforts requiring coordination across technical and non-technical departments.
• Strong understanding of CMMC domains, practices, scoping methodologies, evidence requirements, and third-party assessment processes.
• Experience driving implementation of technical, administrative, and physical control requirements.
• Proven ability to manage multi-million-dollar programs with significant…