Quality & Compliance Manager

The role

The Quality & Compliance Manager will own enterprise certification programs including CMMI, ISO standards, and CMMC Level 2. You will maintain audit readiness, support proposals, and work with delivery teams to embed processes into daily project work.

What you will do

• Own and maintain CMMI appraisals, ISO 9001, ISO 27001, and ISO 20000 certifications
• Lead CMMC Level 2 readiness and sustainment
• Maintain the Quality Management System and Information Security Management System
• Plan and conduct internal audits and track findings to closure
• Support capture and proposal teams by validating certification compliance
• Coach program and project managers on process requirements and tailoring
• Report certification status, risks, and audit metrics to senior leadership
• Stay current on changes to CMMC, DFARS, and ISO/CMMI standards

Required qualifications

• Bachelor’s degree in Information Security, Engineering, Business, Quality Management, or a related field
• 7+ years of experience in quality, compliance, or security program management
• Hands-on experience maintaining at least two of: CMMI, ISO 9001, ISO 27001, CMMC/NIST SP 800-171
• Experience supporting external audits or appraisals
• Strong writing skills for policies, procedures, and proposal inputs

Nice to have

• ISO 9001 and/or ISO 27001 Lead Auditor certification
• CMMI Associate or Certified CMMI Professional; experience supporting a Lead Appraiser
• Cyber AB Certified CMMC Professional (CCP) or Assessor (CCA)
• CISSP, CISA, or CISM
• Experience with GRC or QMS tools and with proposal support

Benefits

• Healthcare (medical, dental, vision, and disability)
• 401k program with 100% vesting from day one and employer match after 90 days
• Educational Assistance program
• Student loan repayment program
• Gym Reimbursement Program
• Paid Time off

About the company

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, it provides full-cycle IT consulting and Management support in both the private and public sectors.