Lead CCA Certified Professionals

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate Organizational Preparedness: Analyze existing cybersecurity practices and identify gaps concerning the three CMMC 2.0 levels (Foundational, Advanced, Expert)

• Guidance on CMMC Certification: Offer expert insights on the necessary steps to secure and maintain certifications for Levels 1, 2, 3, and 4, including support for self-assessments, third-party certifications, and government-led evaluations

• Compliance Planning: Create a detailed strategy for achieving CMMC compliance, which includes identifying required controls and policies, implementing NIST SP 800-171/800-172 standards, and addressing security for Federal Contract Information (FCI) and Controlled Unclassified Information (CUI)

• Oversight of Subcontractors: Aid prime contractors in ensuring that subcontractors fulfill CMMC certification requirements by establishing a comprehensive supply chain compliance management system

• Incident Notification & Ongoing Compliance: Provide advice on creating continuous monitoring and compliance protocols, including the prompt reporting of security incidents (within 72 hours) and annual compliance affirmations

• Training & Awareness Programs: Facilitate training sessions for internal teams and contractors to comprehend CMMC requirements and the implementation of appropriate cybersecurity controls

⛳️ Requirements

• Over 5 years of experience in cybersecurity consulting, focusing on DoD contracts, compliance frameworks (e.g., NIST SP 800-171), and CMMC implementation

• Certified CMMC Professional (CCP)

• Certified CMMC Assessor (CCA)

• Certified DOD CMMC Assessor

• Proficiency in establishing an authorized CMMC Third Party Assessment Organization (C3PAO)

• Knowledgeable about new CMMC 2.0 requirements and the Department of Defense's recently issued final rule for the Cybersecurity Maturity Model Certification (CMMC) Program

• Experience with the Defense Industrial Base (DIB) and managing Controlled Unclassified Information (CUI)

• Previous experience in developing Plans of Action and Milestones (POA&M) for cybersecurity compliance

• Familiarity with the latest DFARS Clause 252.204-7021 requirements and the implications of the August 2024 CMMC 2.0 updates

🏝️ Benefits

• Equal Opportunity Employer