Certified CMMC Assessor

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Columbia, MD, Columbia, MD, US

5 days ago Requisition

The Certified CMMC Assessor (CCA) leads formal CMMC assessments and may also support readiness and pre‑assessment advisory engagements, provided independence and objectivity are maintained. This role is responsible for assessment leadership, control evaluation, and final compliance determinations, while ensuring adherence to the CMMC Assessment Process (CAP).

• Lead or support readiness reviews and mock assessments
• Evaluate organizational preparedness for CMMC certification
• Certification boundary definition
• Policy and Procedure development and evaluation
• Evidence sufficiency and documentation quality
• Identify risks that may impact assessment outcomes
• Ability to understand technical solutions to stratify control implementation

7–10 years of experience in:

• Cybersecurity
• IT audit or assessments
• Risk management and compliance
• Information security program management

3–5 years in a lead role involving:

• Assessments, audits, or compliance programs
• Decision‑making authority over control evaluation

• Experience working with or within 3
  
  PAOs or accredited assessment bodies
• Familiarity with federal frameworks such as FedRAMP
• DFARS  (Safeguarding) and DFARS  (CMMC Requirements)
• Experience assessing complex environments (cloud, hybrid, MSPs, enclaves)
• Strong judgment and decision‑making authority
• Ability to assess ambiguous or partially implemented controls
• Executive‑level communication and stakeholder engagement
• High ethical standards and professional integrity

• Must avoid conflicts of interest in accordance with applicable CMMC ecosystem expectations