We are seeking to hire a CMMC Compliance Manager for our U.S. Head Office located in Denver, CO. Reporting to the President & COO, U.S. Operations and Assistant General Counsel, you will work closely with the Sr. Manager, Cybersecurity and Networking Business Technology and the Government Contract Compliance Officer. The CMMC Compliance Manager will be responsible for supporting the company's U.S. government cybersecurity compliance program, with primary focus on Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171 compliance, DFARS cyber requirements, and related contractual safeguarding obligations. This role helps coordinate the governance, documentation, readiness, and ongoing compliance activities required to support eligibility for U.S. government contract performance.

Our offerings could include:

• Employee ownership opportunities that build long-term value
• Annual discretionary performance bonuses
• 401(k) with company match
• Industry-leading medical, dental and vision benefits
• Prescription drug coverage and telemedicine services
• Life, AD&D and disability insurance
• Paid parental leave and family care support
• HSA or FSA for healthcare, dependent care and transportation
• Mental health and wellness support, including Employee Assistance Programs
• Career growth pathways, leadership development and mentorship programs
• Access to world-class training through PCL's College of Construction and professional development courses
• Ongoing opportunities to learn new skills, explore different roles and grow your career across sectors and regions

Here's how a CMMC Compliance Manager for PCL Construction Enterprises, Inc. within US Head Office contributes to our team:

Responsibilities
• Manages the company's CMMC compliance and government cybersecurity program across the PCL's U.S.-based operations, with accountability for readiness, assessment preparation, and ongoing compliance.
• Establishes, maintains, and enforces the cybersecurity compliance framework, including policies, procedures, standards, workflows, control ownership models, system security plans, POA&Ms, compliance matrices, evidence inventories, and readiness trackers across the U.S.
• Owns implementation and sustainment of NIST SP 800-171, CMMC, DFARS/FAR safeguarding requirements, and related CUI handling obligations across applicable U.S. government contract work.
• Leads day-to-day cross-functional execution of required technical and administrative controls, coordinating with business technology, information technology, cybersecurity, legal/compliance, contracts, operations, and other stakeholders to drive delivery, timelines, evidence collection, and issue resolution.
• Owns CMMC readiness and assessment preparation, including boundary definition, control narratives, inheritance strategy, evidence organization, assessment support files, and engagement with assessors, customers, and external auditors.
• Monitors cybersecurity requirements in solicitations, contracts, modifications, and flow-down provisions, including DFARS [redacted], [redacted], [redacted], [redacted], FAR 52.204-21, and related safeguarding clauses.
• Coordinates subcontractor and supplier compliance activities where cybersecurity clauses, safeguarding requirements, or CUI handling obligations apply.
• Tracks remediation items, follow-up actions, milestone dates, and compliance gaps to closure, and maintains audit-ready records in designated repositories in accordance with company governance requirements.
• Supports incident reporting workflows, escalation paths, and documentation related to government cybersecurity reporting obligations.
• Develops and administers role-based training and awareness for CMMC, CUI handling, safeguarding obligations, and project-level compliance execution.
• Prepares recurring status reports, dashboards, metrics, and executive summaries regarding cybersecurity compliance posture, readiness, and program progress.
• Participates in internal working groups and stays current on changes to government cybersecurity requirements, assessing impacts and communicating updates to internal stakeholders.

Qualifications
• Bachelor's degree in cybersecurity, information systems, business, legal studies, government contracting, compliance, or related field preferred.
• Minimum 3-7 years of experience in government contract compliance, cybersecurity compliance, IT governance, audit support, risk management, or related work.
• Experience supporting U.S. government contract requirements strongly preferred.
• Working knowledge of CMMC, NIST SP 800-171, DFARS cyber clauses, FAR safeguarding requirements, and Controlled Unclassified Information requirements preferred.
• Experience coordinating compliance documentation, assessments, evidence collection, or audit support strongly preferred.
• Familiarity with policy/procedure management, issue tracking, database development and corrective action follow-up.
• Experience working across legal/compliance, IT, contracts, operations, and business stakeholders preferred.
• Demonstrated ability to work as member of a team and trusted client advisor.
• Ability to establish and maintain good rapport with executives, district office management and other internal clients.

The estimated salary range for this role is $127,000 - $174,500, based on your experience and qualifications. Final compensation will be confirmed as part of a personalized offer.

We anticipate this requisition will be open for a minimum of five days, though it may be open for a longer period of time. We encourage your prompt application.

Company: PCL Construction Enterprises, Inc.

Primary Location: Denver, Colorado

Job Title: CMMC Compliance Manager

Requisition ID: 13286