CUI & CMMC Specialist

We’re seeking a Controlled Unclassified Information (CUI) Specialist to join our team in Berthoud, CO. This position is responsible for ensuring compliance with federal CUI regulations, maintaining Ursa Major’s CUI program, and driving awareness and accountability across the organization. The ideal candidate will have a strong understanding of information security, experience implementing compliance frameworks, and a collaborative mindset.

Responsibilities

• CUI Identification and Classification
  • Identify and classify sensitive information in accordance with organizational policies and federal regulations.
  • Apply proper CUI markings, labels, and metadata to documents and electronic files.
• Compliance and Regulatory Adherence
  • Ensure organizational compliance with all relevant laws, regulations, and directives governing CUI (e.g. NIST SP 800-171, DFARS 252.204-7012).
  • Maintain up-to-date knowledge of evolving CUI policies, guidance, and best practices.
• Policy Development and Implementation
  • Develop, maintain, and update CUI-related policies, standard operating procedures (SOPs), and documentation.
  • Collaborate across departments to ensure consistent application of CUI requirements.
• Training and Awareness
  • Conduct training and awareness sessions for Ursa Major employees on proper CUI handling, marking, and storage.
  • Create and distribute educational materials to reinforce compliance and security culture.
• Monitoring and Auditing
  • Monitor CUI handling practices and conduct periodic audits to ensure compliance.
  • Investigate and document potential CUI incidents or breaches; recommend and track corrective actions.
• Collaboration
  • Partner with IT, Cybersecurity, Legal, and Compliance teams to ensure cohesive management of CUI across systems and processes.
  • Serve as a subject matter expert and point of contact for CUI-related inquiries.
• Risk Management
  • Identify risks associated with CUI management and propose mitigation strategies.
  • Work with security and infrastructure teams to ensure CUI protection against unauthorized access or disclosure.
• Cross-Functional and Strategic Initiatives
  • Lead or support cross-functional projects to enhance CUI management and information architecture.
  • Contribute to strategic planning and continuous improvement initiatives focused on data protection and compliance maturity.

Minimum Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Business Administration, or a related field (or equivalent experience).
• 3-6 years of experience in information security, compliance, or data management roles, preferably in a defense or aerospace environment.
• Working knowledge of CUI requirements, NIST SP 800-171, and DFARS clauses.
• Experience developing and implementing security or compliance policies.
• Strong communication, training, and cross-functional collaboration skills.
• Ability to analyze complex data handling processes and recommend improvements.

Preferred Qualifications

• Experience working in a DoD, defense contractor, or ITAR-compliant environment.
• Familiarity with cybersecurity frameworks such as CMMC, ISO 27001, or NIST SP 800-53.
• Prior experience conducting internal audits or compliance assessments.
• Active security clearance or eligibility to obtain one.

Colorado law requires us to tell you the base compensation range of this role, which is an annual salary of $80,000 - $110,000, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we are evaluating individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you and see if you are a great fit for our team. What we can’t quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. 

Classification: Full-time Exempt

Click here for more information about our awesome benefits.