Practice Director/Manager/Principal

Summary

112Cyber is seeking an experienced Services leader and Cyber Compliance professional to lead the growth and execution of our CMMC Compliance practice and team members. This role requires experience equivalent to a Practice Manager, Director, Principal, or similar leadership role in leading and growing a successful professional services organization in the cyber risk and compliance domain.

Responsibilities

• Shaping and scaling CMMC compliance services, owning customer delivery outcomes, and serving as a senior advisor to both clients and internal teams.
• Driving strategic oversight of customer engagements, mentoring and developing consultants, establishing delivery standards, and partnering closely with our platform and product teams to influence roadmap decisions based on customer needs.
• Leading and coordinating external and internal audit activities, including DFARS, CMMC, NIST 800-53, or similar regulatory assessments.
• Producing high-quality technical documentation, compliance deliverables, and executive-level reports.
• Managing practice resources and capacity, aligning consultant skills and availability to active projects while balancing utilization, delivery timelines, and customer priorities.
• Overseeing formal CMMC assessments conducted by assessment teams, ensuring adherence to C3PAO requirements, assessment methodology, and accreditation standards.
• Maintaining assessment integrity and consistency across the practice by enforcing standardized procedures, quality controls, and continuous improvement of the C3PAO program.

Requirements

• 5–8+ years of experience in IT security controls testing and documentation, including responsibility for managing and overseeing client control testing efforts.
• 5+ years of experience leading and coordinating external and internal audit activities, including DFARS, CMMC, NIST 800-53, or similar regulatory assessments.
• 5+ years of experience producing high-quality technical documentation, compliance deliverables, and executive-level reports.
• 3+ years of experience in practice leadership, including managing consultant performance, capacity planning, delivery quality, and continuous improvement of service offerings.

Qualifications

• Cyber Risk and Compliance Domain Expertise: Experience in IT security controls testing and documentation, leading and coordinating external and internal audit activities, and producing high-quality technical documentation, compliance deliverables, and executive-level reports.
• Services Industry Experience: Experience in practice leadership, including managing consultant performance, capacity planning, delivery quality, and continuous improvement of service offerings.

Skills

• Self-directed leader with a strong sense of ownership and accountability for outcomes.
• Proven ability to engage executive stakeholders, build trusted relationships, and influence decision-making.
• Exceptional communicator, able to translate complex technical and regulatory concepts into clear, actionable guidance for non-technical audiences.
• Active Lead CMMC Certified Assessor (CCA) credential; willingness to obtain if not currently certified.
• Industry certifications such as CISSP, CISM, CISA, CRISC, or equivalent.

Benefits

• Competitive salary and bonus plan.
• Long-term opportunity for equity interest in company.
• Comprehensive medical, mental, and vision plans.
• 401(k) with company match.
• 30 days annual paid time off.
• Significant Training and Development and Certification attainment.
• Opportunity for long term career advancement.

Pay

Competitive salary and bonus plan.

Schedule

Full-time position.