We're Hiring!* Hold a (CCA) Certification is mandatory*
We seek a highly skilled CMMC Level 2 Certified Assessor (CCA) to join our team on a project basis. The ideal candidate will have a proven track record in information security, compliance, and auditing, with expertise in NIST 800-171 standards and the CMMC Assessment Process. This role involves conducting official CMMC Level 2 assessments for organizations seeking certification, preparing detailed audit reports, and ensuring alignment with the standards set by the CMMC Accreditation Body (CMMC-AB).
Key Responsibilities:
- Perform official CMMC Level 2 assessments for organizations seeking certification.
- Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance gaps.
- Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards.
- Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ensure assessments meet accreditation requirements.
- Guide organizations through the formal CMMC assessment process, ensuring readiness and compliance with certification criteria.
- Stay updated on CMMC requirements, standards, and best practices changes.
Requirements
Qualifications, Skills & Certifications
- Minimum of 5 years of experience in information security auditing, with a strong focus on NIST SP 800-171 compliance.
- Proven experience conducting formal compliance audits and security assessments.
- Familiarity with the Cybersecurity Maturity Model Certification (CMMC) Assessment Process and documentation requirements.
- Strong knowledge of NIST SP 800-171 standards, security controls, and compliance requirements.
- Deep understanding of information security principles, risk management, and audit methodologies.
- Excellent written and verbal communication skills, with the ability to create detailed, high-quality assessment reports.
Required Certification
- CMMC Certified Assessor (CCA) certification.
- Candidates must currently hold, have previously held, or be willing to obtain the certification under client sponsorship.
Preferred Certifications
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified Authorization Professional (CAP)
Benefits
Flexible, project-based engagements with the opportunity to work on high-impact cybersecurity compliance initiatives.
Competitive hourly compensation based on experience, certifications, and project scope.
Opportunity to work on 80+ hour engagements with established clients across regulated industries.