What are the responsibilities and job description for the Compliance Specialist position at Volex?
At Volex, we are dedicated to improving the quality of life around the world by bringing connectivity and power to high tech equipment that is changing how we live, work, and communicate.
We invest in developing our production sites to meet our customers’ evolving requirements. We have assembled a compelling and diverse range of capabilities to provide our customers with an integrated solution to their manufacturing challenges. The Volex portfolio of products, capabilities and solutions include: Power Cords, Plugs, Connectors, Receptacles, Integrated Manufacturing Services (IMS), Electric Vehicle Charging Solutions, Consumer Cable Harnesses and Power Products, High-Speed Copper Interconnect Cable / Data Transfer Cable, and Data Centre Power Cables / Power Cords.
Job Summary:
The CMMC 2.0 Compliance Specialist is responsible for supporting the organization’s efforts to achieve and maintain compliance with the Cybersecurity Maturity Model Certification (CMMC) 2.0 requirements. This role focuses on documenting policies and procedures, collecting and organizing evidence, and preparing the organization for successful third-party assessments.
Key Responsibilities:
- Develop, document, and maintain cybersecurity policies, procedures, and plans aligned with CMMC 2.0 (Level 1 or Level 2 as applicable)
- Map organizational controls to NIST SP 800-171 requirements
- Gather, organize, and maintain audit-ready evidence (e.g., system configurations, access logs, training records)
- Support creation and maintenance of the System Security Plan (SSP) and Plans of Action & Milestones (POA&M)
- Conduct internal self-assessments and gap analyses against CMMC controls
- Coordinate with IT, security, HR, and leadership teams to ensure control implementation
- Prepare documentation and artifacts for third-party C3PAO assessments
- Track remediation efforts and ensure timely closure of compliance gaps
- Assist with incident response documentation and compliance reporting
Required Skills & Qualifications:
- Working knowledge of CMMC 2.0 framework and assessment requirements
- Familiarity with National Institute of Standards and Technology (NIST) cybersecurity frameworks (especially SP 800-171)
- Experience creating and maintaining compliance documentation and audit evidence
- Understanding of basic IT/security concepts (access control, logging, system hardening, etc.)
- Strong attention to detail and document organization skills
- Ability to translate technical controls into clear written policies and procedures
- Experience supporting audits or regulatory compliance efforts
Preferred Qualifications:
- Experience with Department of Defense (DoD) contractors or regulated environments
- Familiarity with tools like GRC platforms, SIEMs, or vulnerability scanners
- Certifications such as Security , CISSP, or CMMC-related training
- Experience working with third-party auditors or assessors (C3PAOs)
Key Deliverables:
- Complete and audit-ready System Security Plan (SSP)
- Documented policies and procedures aligned to CMMC practices
- Organized evidence repository for each control
- Gap analysis and remediation tracking (POA&M)
- Audit support package for third-party assessment