We seek a highly skilled CMMC Level 2 Certified Assessor (CCA) to join our team on a project basis. This role involves conducting official CMMC Level 2 assessments for organizations seeking certification, preparing detailed audit reports, and ensuring alignment with the standards set by the CMMC Accreditation Body (CMMC-AB).
Key Responsibilities:
- Perform official CMMC Level 2 assessments for organizations seeking certification.
- Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance gaps.
- Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards.
- Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ensure assessments meet accreditation requirements.
- Guide organizations through the formal CMMC assessment process, ensuring readiness and compliance with certification criteria.
- Stay updated on CMMC requirements, standards, and best practices changes.
Requirements
Qualifications, Skills & Certifications
- Minimum of 5 years of experience in information security auditing, with a strong focus on NIST SP 800-171 compliance.
- Familiarity with the Cybersecurity Maturity Model Certification (CMMC) Assessment Process and documentation requirements.
- Strong knowledge of NIST SP 800-171 standards, security controls, and compliance requirements.
- Deep understanding of information security principles, risk management, and audit methodologies.
- Experience leading formal compliance interviews, presenting findings and remediation plans, and guiding organizations through CMMC readiness and certification discussions.
Required Certification
- Currently hold an LCCA certification.
- Currently hold, have previously held, or be willing to obtain a CMMC Certified Assessor (CCA) certification under client sponsorship.
Preferred Certifications
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified Authorization Professional (CAP)
Benefits
Flexible, project-based engagements with the opportunity to work on high-impact cybersecurity compliance initiatives.
Compensation: 8,000-15,000 USD per project.
Opportunity to work on 80+ hour engagements with established clients across regulated industries.