Apply on Employer Site

C3 Integrated Solutions · 1 day ago

Assessment Consultant, CMMC

United States

Full-time

Remote

Senior Level

7+ years exp

C3 Integrated Solutions is a rapidly growing company specializing in cybersecurity services. They are seeking a Dedicated Assessment Consultant to lead client engagements in CMMC assessments, managing project timelines and ensuring compliance with cybersecurity standards.

Cloud ComputingCyber SecurityIT Infrastructure

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Review and prepare client documentation to ensure successful pre-assessments and assessments

Conduct gap analyses to identify areas of non-compliance and develop remediation plans

Project manage client assessments by contacting, organizing, and facilitating stakeholders and interested parties before, during, and after assessments

Validate system scope (technology, people, business processes) for compliance

Perform QA/QC and validate artifacts and evidence and ensure client success prior to assessment

Manage, validate, and defend System Security Plan(s), policies, and procedures in CMMC assessments

Manage customer expectations, internal and external resources, and relevant third parties to ensure engagements are successful

Facilitate post-assessment debriefings with clients to review findings and next steps

Provide ongoing advisory to clients on issues related to security and compliance

Provide expert guidance on interpreting compliance requirements and translating them into actionable steps for clients

Develop and maintain subject matter expertise in the laws, regulations, and government-wide policies that govern cybersecurity data protection for the U.S. Defense Industrial Base, including:

DFARS (NIST SP 800-171, FedRAMP equivalency)

CMMC (Levels 1 & 2, boundary scoping)

CUI Program (NARA CUI Registry, CUI/CDI/CTI, FCI)

Export controls (ITAR/EAR)

Assist team members with client needs as needed

Analyze assessment results and provide strategic recommendations for improving C3’s services

Contribute to the development of internal best practices and methodologies for conducting assessments

Mentor junior team members on assessment techniques and client management strategies

Qualification

CMMC assessment expertiseDFARS compliance knowledgeMicrosoft Azure experienceCyber AB's CCP certificationNIST SP 800-171 knowledgeProject management skillsCommunication skillsCross-training abilityConsulting experienceBachelor's degreeInterpersonal skillsOrganizational skillsTime management skillsAdaptability

Required

Subject matter expertise in CMMC assessment and certification requirements (including assessment objectives up to Level 2) and DFARS 252.204-7012 requirements (including FedRAMP Moderate equivalency requirements for cloud service providers and paragraph (c) – (g) requirements)

Cyber AB's CCP is required; CCA is preferred

Technical understanding and experience leveraging Microsoft cloud services (Azure, Office 365) to meet compliance requirements, especially in Azure Government and Microsoft 365 GCC High environments

Microsoft AZ-500 certification, highly preferred

7 or more years of experience implementing cybersecurity requirements for Department of Defense contractors (DFARS 252.204-7012, NIST SP 800-171) or federal information systems (RMF, NIST SP 800-53)

Very strong written and verbal communication skills, with the ability to convey technical information as a subject matter expert (SME) for various compliance frameworks

High emotional intelligence and interpersonal skills, with an enthusiasm for collaboration and coordination with various client company stakeholders from executive management to entry-level staff

Strong organizational and time management skills with ability to correctly prioritize workload to maintain schedules, deadlines, and standards on assigned projects

Ability to remain calm under pressure and be adaptable

Ability to cross-train into other specialties

Awareness of the cybersecurity product/vendor landscape and current security best practices

Awareness of U.S. export control requirements under ITAR and EAR

Experience consulting with multiple clients at the same time

Bachelor's degree or higher in technology, engineering, or related field

Ability to obtain U.S. government security clearance