Certified CMMC Professional

Columbia, MD, Columbia, MD, US

The Certified CMMC Professional (CCP) supports bothCMMC readiness engagements and formal assessment activities by evaluating an organization’s cybersecurity practices against CMMC requirements. This role contributes tocontrol implementation validation, documentation analysis, and assessment execution, while ensuring alignment with the CMMC Assessment Process (CAP).

• Support organization sin preparing for CMMC Level 1 and Level 2 certification
• Perform gap assessments against:
• CMMC requirements
• NIST SP 800-171 controls
• Assistin the development and refinement of:
• System Security Plans (SSPs)
• POA&Ms
• Policies and procedures
• Helpidentifyand remediate control deficiencies prior to formal assessment
• Evidence requirements
• Certification boundary considerations

• Cybersecurity
• IT audit or compliance
• Governance, Risk, and Compliance (GRC)
• Information systems or IT operations

• CMMC Level 1 and Level 2 requirements
• NIST SP 800-171
• CMMC Assessment Process (CAP)
• FedRAMP
• SOC 2

• Experience supporting:
• Security assessments or audits
• Compliance frameworks (e.g., FedRAMP, SOC 2, ISO 27001)
• Familiarity with DoD contractor environments and Controlled Unclassified Information (CUI)
• Analytical thinking and attention to detail
• Ability to interpret control requirements and supporting evidence
• Strong written and verbal communication skills
• Ability tooperatein both advisory and assessment roles with discipline

• Must avoid conflicts of interest in accordance with applicable CMMC ecosystem expectations