CMMC Readiness Assessor

Fully remote | Long term contract | CCA or CCP REQUIRED No Associate Vendors

Overview

Our client is seeking a Senior CMMC Readiness Assessor to lead end-to-end CMMC Level 2 readiness and gap assessment engagements for organizations preparing for certification. This individual will serve as a trusted advisor to clients, helping define assessment scope, evaluate compliance posture, identify gaps against CMMC Level 2 and NIST 800-171 requirements, and develop actionable remediation roadmaps. The ideal candidate has experience managing multiple client engagements simultaneously and has personally led readiness assessments from initial scoping through final reporting. Engagements typically range from 60-90 days, with most projects lasting 2-4 months and larger, more complex organizations extending up to six months. This is primarily a remote consulting role with occasional travel requirements based on client needs.

Key Responsibilities

Lead end-to-end CMMC Level 2 readiness assessments and gap analyses. Define assessment scope and establish system boundaries for client environments. Review cybersecurity programs, policies, procedures, and supporting documentation against CMMC Level 2 requirements. Assess SSPs, POA&Ms, evidence packages, and supporting artifacts. Conduct stakeholder interviews with IT, Security, Compliance, and business teams. Identify compliance gaps and provide practical remediation recommendations. Develop readiness reports, executive summaries, findings documentation, and client deliverables. Guide clients through preparation efforts leading up to formal certification assessments. Support evidence collection, documentation reviews, and assessment planning activities. Manage multiple client engagements while maintaining quality and consistency across deliverables. Serve as a trusted advisor throughout the assessment lifecycle.

Required Qualifications

Active CCA (Certified CMMC Assessor) or CCP (Certified CMMC Professional) certification. Experience leading CMMC Level 2 readiness assessments and gap analyses. Strong understanding of CMMC 2.0 and NIST 800-171. Experience performing assessment scoping and defining system boundaries. Experience reviewing SSPs, POA&Ms, policies, procedures, and supporting evidence. Ability to independently lead client engagements from kickoff through final reporting. Strong written communication and client-facing consulting skills. Experience facilitating stakeholder interviews and presenting findings. Ability to manage multiple concurrent assessment engagements.

Preferred Qualifications

Experience supporting organizations through remediation planning efforts. Experience working with or alongside a C3PAO. Knowledge of NIST 800-172. Background in cybersecurity compliance, GRC, RMF, FedRAMP, ISO 27001, SOC 2, or information security consulting. Previous consulting experience supporting defense contractors or regulated industries.