This position is posted by Jobgether on behalf of a partner company. We are currently looking for an Assessment Consultant, CMMC in United States.
In this role, you will serve as a trusted advisor and lead consultant guiding clients through complex Cybersecurity Maturity Model Certification (CMMC) assessments within the U.S. Defense Industrial Base ecosystem. You will act as both a project leader and subject matter expert, ensuring organizations are fully prepared for C3PAO pre-assessments and formal assessments. The position combines hands-on cybersecurity expertise with client-facing advisory responsibilities, helping organizations interpret and implement strict compliance frameworks such as DFARS, NIST 800-171, and CMMC requirements. You will work closely with technical, executive, and compliance stakeholders to validate system scope, review security artifacts, and ensure audit readiness. This role offers high visibility and impact, supporting organizations in achieving and maintaining critical government compliance certifications. It is a fast-paced, remote environment requiring precision, adaptability, and strong leadership.
Accountabilities:
- Lead and manage end-to-end CMMC assessment engagements, coordinating stakeholders across client, internal, and third-party teams.
- Review, validate, and prepare documentation, security artifacts, and System Security Plans to ensure assessment readiness.
- Conduct gap analyses against CMMC, DFARS, and related frameworks, and develop actionable remediation plans.
- Define and validate system scope, including people, processes, and technical environments for compliance accuracy.
- Serve as a subject matter expert during C3PAO pre-assessments and formal assessments, defending compliance implementations.
- Advise clients on cybersecurity compliance strategy, translating regulatory requirements into practical implementation steps.
- Facilitate post-assessment reviews, providing findings, recommendations, and improvement strategies.
- Mentor junior consultants and contribute to internal best practices, methodologies, and assessment frameworks.
Requirements:
- 7+ years of experience in cybersecurity compliance, preferably supporting Department of Defense contractors or federal systems.
- Deep expertise in CMMC, DFARS 252.204-7012, and NIST SP 800-171, including understanding of assessment objectives up to Level 2.
- Cyber AB CCP certification required; CCA certification strongly preferred.
- Strong technical knowledge of Microsoft cloud environments, including Azure, Microsoft 365, and GCC High configurations.
- Familiarity with RMF, NIST SP 800-53, FedRAMP equivalency, and federal cybersecurity compliance frameworks.
- Experience working with ITAR/EAR export control requirements and defense industrial cybersecurity standards.
- Excellent communication and stakeholder management skills, with the ability to engage from technical staff to executive leadership.
- Strong organizational skills, attention to detail, and ability to manage multiple concurrent client engagements under deadlines.
- Ability to remain adaptable, composed under pressure, and effective in complex consulting environments.
- Bachelor’s degree in a technical or related field; eligibility for U.S. government security clearance required.
Benefits:
- Competitive salary with bonus structure and performance-based incentives.
- Remote-first work model with minimal travel requirements.
- Comprehensive medical, dental, and vision insurance coverage.
- 401(k) retirement plan with company match.
- Four weeks of paid time off plus paid parental leave.
- Professional development support, including tuition reimbursement and certification opportunities.
- Life and disability insurance coverage.
- Strong culture focused on collaboration, security excellence, and mission-driven impact in the cybersecurity space.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
