CMMC Compliance Manager (m/f/d) (Ref.Nr.: 44747)

For an exciting project with our client in Zurich (remote work possible only within Switzerland), we are looking for a CMMC Compliance Manager (m/f/d).

Key Facts

Job country: Schweiz

• Drive CMMC compliance implementation across the organization, ensuring business adoption
• Manage the impacts of CMMC implementation on the Target Operating Model (TOM)
• Oversee Controlled Unclassified Information (CUI) data flow across regions and map its integration into business processes, roles, and applications
• Develop and implement global and local CMMC policies and guidance, ensuring business review, approval, and localized execution
• Conduct thorough impact analyses of new policies on the Target Operating Model (TOM) and Standard Operating Procedures (SOPs)
• Define and document 'to be' business processes, identifying gaps against CMMC requirements and implementing solutions
• Lead change impact assessments across people, IT, vendors, and processes, facilitating smooth transitions
• Design and deliver engagement and training programs to support new ways of working and drive CMMC compliance

• Many years of leadership experience in audit preparation, business transformation, and project management
• Expertise in NIST and CMMC requirements with a comprehensive understanding
• Proven ability to drive CMMC compliance implementation and ensure business adoption across an organization
• Extensive experience managing the impacts of compliance changes on the Target Operating Model (TOM)
• Demonstrated ability to transition IT Information Security (IS) and business personnel into new, sustainable ways of working while maintaining continuous improvement and compliance
• Strong communication and organizational skills, with the ability to establish and maintain robust stakeholder relationships
• Experience in end-to-end business process analysis across various functions, including sales, procurement, manufacturing, and engineering
• Proficiency in overseeing Controlled Unclassified Information (CUI) data flow across the U.S. and Europe, including mapping its integration into business processes, roles, and applications
• Ability to develop, implement, and localize global and local policies and guidance for CMMC compliance, ensuring business review, approval, and localized execution
• Experience conducting impact analysis of new policies on TOM and standard operating procedures (SOPs)
• Skills in defining, documenting, and performing gap analysis for 'To Be' business processes related to CMMC requirements and implementing solutions
• Demonstrated ability to lead change impact assessments across people, IT, vendors, and processes, facilitating smooth transitions
• Experience designing and delivering effective engagement and training programs for CMMC compliance
• Ability to assess complex security and compliance challenges, design solutions, and drive sustainable improvements in line with business objectives
• Commitment to championing ethical decision-making and regulatory adherence, inspiring others to embrace and uphold CMMC standards
• Fluent in English

Let’s power the future together

From Business Case to Implementation: As a leading consulting firm for strategic transformations, we are a trusted partner for our clients—and for our employees. Responsible, high-performing, and always with a focus on people. #WeAreWavestone

With our 360° portfolio of consulting services, we combine top-tier industry expertise with a wide range of cross-sector skills, work interdisciplinary, and think outside the box. This allows us to offer our partner companies and freelancers comprehensive perspectives within our own projects, while also supporting them as a long-standing framework agreement partner in filling project vacancies—promptly and directly.

We look forward to hearing from you!

Your direct contact at Wavestone

Vivek Kandiah

E-Mail: vivek.kandiah@wavestone.eu