CMMC Advisory Manager

This is a fully remote position, open to applicants in North Carolina, +1 more state.

📋 Description

• Manage a varied portfolio of CMMC readiness and certification assessment projects from the initial scope to the final report.

• Handle multiple CMMC Level 1 and Level 2 readiness assessments, gap analyses, and certification tasks simultaneously.

• Take ownership of engagement scope, budget, staffing, timelines, client relationships, engagement economics, and quality of delivery.

• Provide guidance to client executives and program leaders on CUI and FCI scoping, enclave strategies, remediation efforts, and certification timelines.

• Lead and review assessments in accordance with NIST SP 800-171 and NIST SP 800-171A standards.

• Evaluate System Security Plans, POA&Ms, policies, configurations, technical evidence, workpapers, deliverables, and reports.

• Address intricate issues related to scoping, interpretation, evidence sufficiency, risk, and independence.

• Oversee, mentor, and develop Senior Consultants and Consultants.

• Assist in business development through scoping discussions, proposals, fee estimates, and cross-serving opportunities.

• Contribute to the execution of the CMMC go-to-market strategy, encompassing service design, target markets, pricing, and campaigns.

• Establish thought leadership through webinars, articles, whitepapers, and client briefings.

• Represent the firm at CMMC conferences, industry associations, and ecosystem events.

• Enhance assessment methodologies, tools, and templates while keeping abreast of CMMC, DFARS, FAR, and related DoD requirements.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.

• 7-10 years of experience in IT Audit, Cybersecurity, Risk Advisory, Compliance, or NIST SP 800-171 / CMMC assessments.

• A minimum of 2 years in a supervisory or engagement management role.

• CMMC Professional (CCP) certification is mandatory.

• CMMC Assessor (CCA) certification is preferred, with the capability to serve on or lead CMMC Assessment Teams.

• U.S. citizenship is necessary to participate in CMMC assessment activities and access client CUI environments.

• Comprehensive knowledge of the CMMC Program, NIST SP 800-171 and 800-171A, CUI, and FCI.

• Proven experience managing assessment or audit engagements from start to finish, including budgeting, staffing, risk management, and quality review.

• Familiarity with IT General Controls, access management, vulnerability management, network security and segmentation, FIPS-validated encryption, logging/monitoring, FedRAMP, and External Service Provider requirements.

• Demonstrated experience in presenting assessment results, remediation strategies, and compliance risks to executive leadership, boards, and government contracting stakeholders.

• Established ability to cultivate and maintain client relationships and support proposals, fee estimates, and practice growth initiatives.

• Experience in recruiting, mentoring, and developing high-performing teams.

🏝️ Benefits

• Training, mentoring, and staff development opportunities.

• An inclusive firm culture focused on diversity.

• Chance to work with a rapidly expanding Top 50 accounting and advisory firm.

• Exposure to a variety of clients and engagement opportunities.

• Opportunities for business development and practice growth.