Position Title:Compliance Architect
Position Type:Salary/Exempt
Clearance: n/a
Location:Huntsville, AL/Remote
Salary*:$150,000+
*Dependent upon qualifications
Essential Functions:The Compliance Architect serves as a client-facing CMMC advisor and internal escalation resource for complex compliance and business matters. This role conducts strategic compliance reviews during the early stages of a client's CMMC Level 2 journey to capture current state, desired future state, and a strategic roadmap for successful program implementation. The role works with executive sponsors and key stakeholders to align business objectives, regulatory requirements, technical constraints, and expectations. The advisor identifies potential risks, validates high-level scoping assumptions, assesses organizational readiness and dependencies, and delivers a clear, actionable roadmap to support successful client outcomes and effective internal delivery.
Duties and Responsibilities include:- Lead strategic discovery and advisory engagements with clients and key stakeholders
- Elicit and document immediate and long-term goals from both operational and executive perspectives to ensure alignment with CMMC requirements and business objectives
- Validate high-level CMMC scoping assumptions, organizational boundaries, external dependencies, additional governance or compliance obligations, and inherited or shared control providers
- Identify potential risk areas early in the engagement (e.g., operational technology, planned architectural changes, manufacturing systems, printed materials, specialized equipment, parent-organization constraints)
- Assess client readiness, resourcing, governance, and expectation for meeting compliance goals
- Develop a strategic compliance roadmap outlining current state, desired future state, key risks, and recommended paths forward
- Provide clear strategic recommendations to internal teams conducting next steps
- Serve as a senior compliance consultant supporting client escalations, complex compliance discussions, and pre-sales activities as requested
- Develop internal FAQs, guidance materials, and training content tailored to Summit 7 clients and service offerings as priorities permit.
- Maintain subject matter expertise and communication with compliance regulators and/or industry leaders and agencies.
- Contribute to continuous improvement of compliance delivery, client experience, and internal enablement resources
Requirements- Bachelor's degree in Information Security, Information Technology, Risk Management, or Business (or equivalent practical experience)
- Certified CMMC Assessor
- CISSP (active and in good standing), or an equivalent DoD-approved IAM or IAT Level II or Level III certification under DoD 8140/8570 guidance
- Additional cybersecurity, compliance, risk, or audit certifications (e.g. CCSP, CRISC, CISA) a plus
- 10+ years of progressive experience in cybersecurity, compliance, or risk management, including at least 5 years supporting or performing DoD-aligned compliance efforts such as CMMC, NIST SP 800-171) in assessment and strategic advisory roles
- Experience advising executive leadership on compliance, cybersecurity risk, and regulatory strategy
- Experience within organizations operating under multiple or overlapping governance, regulatory, or contractual requirements
- Experience supporting organizations across diverse industries (e.g. professional services, engineering, aerospace, manufacturing and construction)
- Excellent verbal and written communication skills, with the ability to communicate effectively at all organizational levels
- Strong understanding of Summit 7 MSP/MSSP service offerings, with a broad familiarity with enterprise IT architectures, including on-premises and cloud (Microsoft 365 and Azure)
- Proficient with Microsoft Office productivity and collaboration tools.
Work Conditions Work is typically performed in an office environment. Must be able to remain in a stationary position for extended periods of time. Will move about designated office space. Regularly operates a computer and other office productivity machinery, such as a copy machine, and computer printer. Must be able to lift up to 25 pounds at a time. The person in this position frequently communicates with employees and clients.
