Apply on Employer Site

Schellman · 5 months ago

Senior Associate, CMMC

United States

Full-time

Remote

Senior Level

Schellman is a leading provider of attestation and compliance services, focusing on cybersecurity assessments. As a CMMC Senior Associate, you will be responsible for delivering high-quality cybersecurity assessments for clients, executing gap assessments, compliance assessments, and formal certification assessments, while collaborating with project management teams.

Assisted LivingConsultingInformation Technology

Growth Opportunities

Responsibilities

Interviewing client Subject Matter Experts for different fields of the organization, including technical areas as well as Human Resources, SecDevOps, SOC/NOC, and Internal Compliance

Performing walkthroughs of client on-premise, cloud, and hybrid architectures

Reviewing system security and technical configurations as they pertain to NIST 800-171 control requirements and CMMC scoping considerations

Analyzing technical documentation such as system security plans (SSPs), policies, procedures, and evidence artifacts

Documenting assessment findings, developing scoring rationales, and drafting formal deliverables; and

Maintaining awareness of evolving DoD and CMMC program requirements, including updates to the CAP, scoping guides, and assessment guides to support Schellman methodology updates and client education

Complying with Schellman’s code of ethics and professional conduct, methodologies, policies, and procedures

Adhering to the professional and regulatory standards relevant to assigned service line specialization(s)

Promoting Schellman’s company culture and exemplifying Schellman's values

Establishing high quality relationships and rapport with client personnel

Managing client expectations to ensure expectations are exceeded

Completing assigned duties in a timely manner and with a high attention to detail

Collaborating with fellow project team members in a productive and timely manner throughout the life cycle of each project

Adhering to project schedules and keeping fellow project team members apprised of the progress of assigned tasks

Escalating issues internally in a proper and timely manner

Using discretion and decorum in the timing, form, and content of all client communications

Booking travel reservations in a timely manner and in accordance with Schellman's travel and expense policies and procedures

Performing the essential functions of other service delivery positions when qualified and called upon to do so

Attending project kick-off and closing meetings

Executing assigned testing procedures, performing detailed analysis, reaching conclusions, documenting results in accordance with company standards and CMMC requirements and guidance (e.g., CAP, 32 CFR Part 170), and suggesting ideas for improvements, where applicable

Drafting project deliverables

Serving as a contact for clients' basic questions regarding an engagement

Participating in recruiting and candidate interview activities

Training project team members

Acclimating newer team members to Schellman

Contributing to Schellman's practice development efforts

Developing an expert knowledge of professional and regulatory standards relevant to assigned service line specialization(s)

Contributing to Schellman's thought leadership (e.g., articles, webinars, public speaking, etc.)

Collaborate with internal teams to ensure consistent application of methodologies and quality standards

Support client education and advisory efforts related to CMMC and NIST SP 800-171 compliance

Participate in FedRAMP readiness and assessment engagements as part of cross-training and service line expansion

Contribute to Schellman’s thought leadership through webinars, articles, and public speaking

Qualification

CMMC complianceNIST SP 800-171Cybersecurity assessmentsFedRAMP readinessTechnical documentation analysisClient service orientationMicrosoft Office proficiencyTime managementOrganizational skillsVerbal communicationWritten communication

Required

Bachelor's degree in accounting, finance, business management, technology, or other relevant subject area, or equivalent years of experience directly related to the duties and responsibilities specified

Has completed at least one year of service at Schellman or relevant professional services experience in financial auditing, operational auditing, information systems auditing, internal auditing, information security management or consulting and/or risk consulting

Must have CCP and a favorable Tier 3 determination from DoD