CMMC Level 2 Certified Assessor

We seek a highly skilled CMMC Level 2 Certified Assessor (CCA) to join our team on a project basis. This role involves conducting official CMMC Level 2 assessments for organizations seeking certification, preparing detailed audit reports, and ensuring alignment with the standards set by the CMMC Accreditation Body (CMMC-AB).

Key Responsibilities

Perform official CMMC Level 2 assessments for organizations seeking certification. Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance gaps. Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards. Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ensure assessments meet accreditation requirements.

Guide organizations through the formal CMMC assessment process, ensuring readiness and compliance with certification criteria. Stay updated on CMMC requirements, standards, and best practices changes.

Requirements

Qualifications, Skills & Certifications Minimum of 5 years of experience in information security auditing, with a strong focus on NIST SP 800-171 compliance. Familiarity with the Cybersecurity Maturity Model Certification (CMMC) Assessment Process and documentation requirements. Strong knowledge of NIST SP 800-171 standards, security controls, and compliance requirements.

Deep understanding of information security principles, risk management, and audit methodologies. Experience leading formal compliance interviews, presenting findings and remediation plans, and guiding organizations through CMMC readiness and certification discussions. Required Certification Currently hold an LCCA certification.

Currently hold, have previously held, or be willing to obtain a CMMC Certified Assessor (CCA) certification under client sponsorship. Preferred Certifications Certified Information Systems Security Professional (CISSP) Certified Information Systems Auditor (CISA) Certified Authorization Professional (CAP) Benefits Flexible, project-based engagements with the opportunity to work on high-impact cybersecurity compliance initiatives.

Compensation

8,000-15,000 USD per project. Opportunity to work on 80+ hour engagements with established clients across regulated industries.