Role: OT Security
CMMC Compliance Specialist
Experience: 12 15 years
Location: USA
Role Overview
We are seeking an experienced OT
CMMC Cybersecurity Expert to assess and strengthen the security of Operational Technology (OT) environments while supporting compliance with the Cybersecurity Maturity Model Certification (CMMC) requirements. The resource will evaluate existing security controls, identify compliance gaps, develop remediation roadmaps, and collaborate with IT, OT, engineering, and compliance teams to improve security posture and certification readiness.
Key Responsibilities
Assess OT/ICS environments, including SCADA systems, PLCs, industrial networks, and associated infrastructure, to identify cybersecurity risks and control gaps.
Evaluate applicable CMMC requirements and conduct gap assessments against the required CMMC level, including relevant NIST SP 800 171 controls.
Review OT network architecture, segmentation, remote access, identity and access management, vulnerability management, and security monitoring controls.
Develop remediation plans, recommend security improvements, and support implementation of appropriate technical and procedural controls.
Prepare compliance documentation, policies, procedures, evidence repositories, and control mapping matrices to support CMMC assessment readiness.
Collaborate with IT security, OT engineering, infrastructure, risk, and compliance stakeholders to align cybersecurity controls with operational requirements.
Support risk assessments, remediation tracking, audit preparation, and ongoing compliance improvement activities.
Required Skills
Qualifications
Strong experience in OT/ICS cybersecurity, industrial network security, or industrial control system security assessments.
Working knowledge of SCADA, PLCs, industrial protocols, OT network architecture, and IT/OT segmentation.
Experience with CMMC requirements, NIST SP 800 171, and applicable NIST SP 800 172 requirements where relevant.
Knowledge of security controls covering access management, MFA, secure remote access, vulnerability management, incident response, logging, and risk management.
Experience conducting cybersecurity gap assessments, documenting findings, and developing remediation roadmaps.
Strong stakeholder management, technical documentation, and communication skills.