Program Manager CMMC

Program Manager

CMMC as a Service Program Development

Position Overview

McLaughlin Research Corporation is seeking a Program Manager – CMMC Business Program Development and Execution to lead the growth and execution of our Cybersecurity Maturity Model Certification (CMMC) advisory and compliance services for small and mid-tier defense subcontractors and critical vendors.

This role sits at the intersection of business development, program delivery, and client success, focusing on helping subcontractors within the Defense Industrial Base (DIB) achieve and maintain CMMC compliance so they can continue competing for Department of Defense (DoD) contracts.

The Program Manager will be responsible for identifying opportunities within the defense supply chain, building relationships with subcontractors and primes, and overseeing the successful delivery of CMMC readiness services. The ideal candidate combines DoD contracting knowledge, business development skills, and program management discipline to drive revenue while delivering meaningful value to defense suppliers.

Key Responsibilities

• Business Development & Growth
• Identify and pursue new business opportunities with small and mid-tier defense subcontractors requiring CMMC compliance support.
• Build relationships with prime contractors, defense industry associations, and supply chain partners to generate leads.
• Develop and execute strategies to expand the company’s CMMC compliance service offerings within the Defense Industrial Base.
• Support capture activities, proposal development, and contract negotiations for CMMC-related services.
• Represent MRC at industry events, conferences, and defense community engagements.

Program Management

• Serve as the Program Manager for CMMC advisory and readiness engagements.
• Oversee the planning, execution, and delivery of CMMC compliance programs for clients.
• Manage internal teams and subcontractors providing cybersecurity, documentation, and compliance support.
• Ensure engagements are delivered on schedule, within scope, and within budget.
• Establish repeatable processes for delivering scalable CMMC compliance services.

Client Engagement & Advisory

• Act as a trusted advisor to defense subcontractors navigating CMMC requirements.
• Guide clients through readiness activities including:
• NIST 800-171 gap assessments
• System Security Plan (SSP) development
• Plan of Action & Milestones (POA&M) management
• Security control implementation
• Maintain strong relationships with clients to support long-term compliance and contract eligibility.

Strategic Initiatives

• Contribute to the development of new service offerings related to cybersecurity compliance and supply chain security.
• Monitor changes to CMMC regulations, DoD cybersecurity requirements, and federal acquisition policies.
• Support the company’s broader strategy to become a trusted partner to the Defense Industrial Base.