# Quality Management - CMMC Assessment Compliance

Provider: [Kieri Solutions LLC](https://programs.cccareers.org/providers/kieri-solutions)

- Program type: Not listed
- Branches: All branches
- Format: Online
- Length: 61 - 90 days
- Locations: Not listed
- Website: https://www.kieri.com
- Contact: MacKenzie Crump, mackenzie@superbloomtalent.com
- Page: https://programs.cccareers.org/programs/kieri-solutions-llc-quality-management-cmmc-assessment-compliance-6bnyab

## Summary

The Quality Manager is responsible for developing, implementing, maintaining, and continually improving the C3PAO’s Quality Management System (QMS) to ensure conformity with ISO/IEC 17020 and the organization’s CMMC assessment policies, procedures, and operational controls. This role provides independent quality oversight of CMMC Level 2 assessment planning, execution, reporting, and records management, ensuring assessments are consistent, defensible, auditable, and aligned with accreditation and program requirements.

## Job description

ISO/IEC 17020 Compliance & QMS Governance● Own and maintain the ISO/IEC 17020-compliant QMS, including quality manual, policies, procedures, work instructions, forms, and records.● Establish and manage document control, record retention, versioning, and change management for quality and assessment artifacts.● Lead internal audits, management reviews, and continual improvement activities; track outcomes to closure.● Maintain a compliance calendar and readiness posture for accreditation surveillance, reassessments, and related external reviews.● Ensure staff competency, training, and authorization records meet ISO/IEC 17020 expectations CMMC Assessment Process Quality & Consistency● Define and enforce standard assessment process controls across the assessment lifecycle (pre-assessment, planning, evidence collection/sampling, onsite/remote execution, scoring, reporting, and closure).● Establish and maintain quality criteria for assessment deliverables.● Conduct quality reviews of assessment packages for completeness, consistency, and defensibility prior to final release.● Validate adherence to internal policies for evidence handling, confidentiality, data protection, and records integrity. Impartiality, Independence, and Risk Management● Manage the impartiality program: identify, evaluate, document, and mitigate threats to impartiality (including conflicts of interest).● Maintain an impartiality risk register and ensure mitigation actions are implemented and reviewed.● Participate in contract review processes to ensure scope, independence constraints, and quality requirements are understood and satisfied before engagement acceptance.Nonconformity, Corrective Action, and Preventive Improvement● Own the nonconformity and corrective action process (NCR/CAR/PAR): intake, triage, root cause analysis, action planning, verification of effectiveness, and closure.● Track and trend quality metrics and nonconformities to identify systemic issues, training needs, and process improvement opportunities.● Coordinate lessons learned and corrective action communication to assessment teams while protecting independence and confidentiality.Training, Competency, and Performance Evaluation● Define competency requirements by role (e.g., assessor, lead assessor, quality reviewer, technical SME) and implement training plans.● Administer periodic performance evaluations for assessment personnel to satisfy ISO/IEC 17020 training evaluation expectations.● Ensure onboarding and continuous training include quality policies, impartiality, records handling, and assessment process requirements.Stakeholder & Accreditation Interface● Serve as the quality point of contact for accreditation bodies and external auditors for QMS-related requests and audits.● Coordinate responses to audit findings, ensuring timely, evidence-based corrective action documentation.● Support executive leadership with compliance status reporting, risk posture, and quality KPI dashboards.

## Locations

- Location not listed

Source: public DoD SkillBridge listings via CCC Programs. Confirm details with the provider and your chain of command.