Leads CMMC and NIST SP 800-171 readiness engagements, including scoping, CUI boundary definition, gap assessments, remediation planning, evidence development, and external assessment preparation. Advises executives and technical teams on cybersecurity, governance, risk, compliance, business continuity, and information security programs. Oversees risk assessments, security documentation, GRC tracking, remediation outcomes, client communications, internal training, and consultant mentorship. The hybrid role is based in Portland, Maine, with occasional onsite client travel.