CMMC Level 2 Certified Assessor

We seek a highly skilled CMMC Level 2 Certified Assessor (CCA) to join our team on a project basis. This role involves conducting official CMMC Level 2 assessments for organizations seeking certification, preparing detailed audit reports, and ensuring alignment with the standards set by the CMMC Accreditation Body (CMMC-AB).

Key Responsibilities:

• Perform official CMMC Level 2 assessments for organizations seeking certification.
• Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance gaps.
• Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards.
• Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ensure assessments meet accreditation requirements.
• Guide organizations through the formal CMMC assessment process, ensuring readiness and compliance with certification criteria.
• Stay updated on CMMC requirements, standards, and best practices changes.

Requirements

Qualifications, Skills & Certifications

• Minimum of 5 years of experience in information security auditing, with a strong focus on NIST SP 800-171 compliance.
• Familiarity with the Cybersecurity Maturity Model Certification (CMMC) Assessment Process and documentation requirements.
• Strong knowledge of NIST SP 800-171 standards, security controls, and compliance requirements.
• Deep understanding of information security principles, risk management, and audit methodologies.
• Experience leading formal compliance interviews, presenting findings and remediation plans, and guiding organizations through CMMC readiness and certification discussions.
• Required Certification
• Currently hold an LCCA certification.
• Currently hold, have previously held, or be willing to obtain a CMMC Certified Assessor (CCA) certification under client sponsorship.
• Preferred Certifications
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Authorization Professional (CAP)