Program Manager

Sr Controlled Unclassified Information (CUI) Program ManagerContinental Electronics Corporation is a leading provider of RF technologies and innovative solutions with 80 years of proven performance. CEC has experienced significant recent growth and has established itself as the go-to supplier for a diversified product line supporting a wide spectrum of markets from commercial products, military customers, to space research laboratories.ResponsibilitiesDevelop, maintain, and mature the organization's enterprise CUI program for DoD contract performance, including governance, policies, procedures, standards, workflows, reporting, and compliance roadmapsServe as the senior subject matter expert for CUI, Covered Defense Information, Federal Contract Information, controlled technical information, and related DoD safeguarding and dissemination requirementsLead implementation and sustainment of CUI protection requirements across various DoD programs, contracts, information systems, enclaves, facilities, suppliers, and subcontractorsCoordinate alignment with applicable requirements, including 32 CFR Part 2002, DoD Instruction 5200.48, DFARS View phone number on click.appcast.io, DFARS View phone number on click.appcast.io, DFARS View phone number on click.appcast.io, DFARS View phone number on click.appcast.io, DFARS View phone number on click.appcast.io, NIST SP 800-171, CMMC requirements, and customer-specific security directionReview applicable CUI Security Class Guides (SCG) and work with Program Management to ensure requirements are metPartner with Contracts, Information Technology, Supply Chain, Program Management, Engineering, Human Resources, and executive leadership to ensure CUI obligations are identified, flowed down, and operationalizedOversee CUI scope definition, data flow mapping, system boundary identification, control ownership, System Security Plan coordination, Plan of Action and Milestones tracking, evidence collection, and assessment readiness activitiesCoordinate with IT and Engineering stakeholders to support NIST SP 800-171 implementation, SPRS score maintenance, CMMC Level 2 readiness, DIBCAC assessment preparation, and customer audit responseEstablish and monitor program metrics, risk indicators, corrective action plans, supplier compliance status, audit findings, POA&M closure, and executive-level reportingLead CUI training and awareness for employees, suppliers, and subcontractors handling DoD information.Support cyber incident reporting coordination, potential CUI handling violation reviews, unauthorized disclosure response, customer notifications, and corrective actions in partnership with IT and Contracts.Monitor changes in DoD policy, acquisition requirements, federal CUI requirements, CMMC implementation, NIST guidance, and customer expectations to ensure the program remains current, auditable, and defensibleAdvise senior leadership on CUI risk, contract compliance posture, customer assessment readiness, resource needs, operational impacts, and strategic priorities across the Defense Industrial Base environmentUphold the company's core values of Integrity, Innovation, Accountability, and TeamworkDemonstrate behavior consistent with the company's Code of Ethics and ConductIt is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problemDuties may be modified or assigned at any time to meet the needs of the businessQualificationsBachelor's degree in Cybersecurity, Information Technology, Business Administration, Security Management, Compliance, or a related field; equivalent DoD contractor experience may be considered8 or more years of progressive experience in compliance, cybersecurity, information protection, government contracting, industrial security, defense program support, or security program managementDemonstrated experience leading enterprise-level compliance or security programs involving CUI, Covered Defense Information, Federal Contract Information, DoD contracts, or regulated government informationStrong working knowledge of DFARS cybersecurity clauses, NIST SP 800-171, CMMC requirements, CUI Registry concepts, DoD CUI policy, risk management practices, and federal acquisition requirements related to safeguarding informationExperience supporting System Security Plans, POA&Ms, control ownership, assessment evidence, audit responses, corrective action plans, training materials, executive briefings, and compliance documentationProven ability to lead cross-functional initiatives, influence stakeholders without direct authority, and drive remediation of complex compliance gaps across technical and non-technical environmentsExcellent written and verbal communication skills, including the ability to translate DoD contractual, regulatory, and technical requirements into practical business guidanceStrong organizational, analytical, problem-solving, and program management skills with attention to detail and accountability for resultsAbility to manage sensitive government and contractor information with discretion, sound judgment, and a high degree of professional integritySelected candidates must be able to obtain and maintain a Secret security clearance issued by the U.S. Government throughout the course of their employment.Desired QualificationsProfessional certifications such as CISSP, CISM, CISA, CRISC, Security+, PMP, Certified CMMC Professional, Certified CMMC Assessor, Registered Practitioner, or other relevant CMMC ecosystem credentialsExperience supporting defense, aerospace, intelligence community support, engineering, manufacturing, or other Defense Industrial Base environmentsExperience preparing for or supporting CMMC Level 2 assessments, DIBCAC assessments, NIST SP 800-171 assessments, SPRS submissions, supplier compliance reviews, DCMA inquiries, or DoD customer security auditsFamiliarity with System Security Plans, POA&Ms, control evidence repositories, secure enclaves, data loss prevention, identity and access management, encryption, incident response, records management, export control coordination, and secure collaboration platformsExperience with subcontractor flow-down, supplier cybersecurity due diligence, prime contractor requirements, customer data rights expectations, and protection of controlled technical informationPrior experience briefing executives, DoD customers, contracting officers, auditors, assessors, security officials, or board-level stakeholdersLeadership CompetenciesStrategic Program Leadership: Builds scalable governance structures, roadmaps, and accountability models for enterprise CUI protectionRegulatory Judgment: Interprets federal and contractual requirements and converts them into practical, risk-based operating proceduresCross-Functional Influence: Drives alignment across cybersecurity, compliance, legal, contracts, operations, and business teamsAssessment Readiness: Maintains evidence, control ownership, remediation discipline, and defensible documentation for audits and reviewsExecutive Communication: Provides concise, risk-informed reporting to senior leaders and decision-makers