CMMC Consultant, CCP

Overview

Nashville, TN

Redspin, a division of Clearwater, is a leading provider of cybersecurity, compliance, consulting, and managed services for the Defense Industrial Base (DIB). Our solutions enable organizations to avoid preventable breaches, protect Department of Defense contractors and their data, meet regulatory requirements, and optimize cybersecurity investments.

Redspin is a recognized leader in the CMMC space. We were the first Authorized CMMC Third-Party Assessor Organization (C3

PAO) and the first to conduct a passing Joint Surveillance Voluntary Assessment Program (JSVAP) assessment. We are a trusted partner for the Fortune 500, and small to mid-size businesses.

We are seeking a highly qualified and experienced Cybersecurity Maturity Model Certification (CMMC) Certified Professional to join our team. This position is responsible for ensuring organizations meet the stringent cybersecurity standards set by the United States Department of Defense (DoD). The ideal candidate will have a thorough understanding of the CMMC framework and will utilize this knowledge to facilitate comprehensive cybersecurity solutions for our company.

Applicant must meet the requirements of Department of Defense (DoD) Manual 8140.03:
Applicable 612 Certifications (At minimum, must posses 1 Intermediate Certification).

The Consultant will dedicate 80% of their time to client billable work, which equates to 1,664 hours over the course of a calendar year.

• Conduct comprehensive assessments of Defense Industrial Base (DIB) organizational networks and systems to identify any vulnerabilities and to confirm they meet the necessary CMMC level requirements.
• Work with organizations to design and implement security measures and controls, in line with CMMC standards, to protect sensitive data and systems from infiltration and cyber-attacks.
• Coordinate with various teams within an organization to develop and implement the action plans necessary to achieve CMMC compliance.
• Clearly articulate the CMMC program to an organization's employees at all levels to ensure understanding and adherence to cybersecurity best practices.
• Assist organizations with the review and update of existing security policies and procedures to align with evolving CMMC requirements and best practices in cybersecurity.
• Prepare detailed reports on the status of an organization's CMMC compliance.
• Keep abreast of the latest cybersecurity threats and trends, as well as updates to the CMMC framework.
• Achieve utilization targets, complete projects on time and budget, and meet quality standards.
• Study, learn, test, document, execute and seek to continuously improve scalable consulting services processes to effectively deliver customer engagements while achieving a high level of customer satisfaction.
• Execute project planning, scheduling, and other coordination of internal and customer resources to conduct interviews, meetings, and presentations.
• Prepare and deliver thoughtful, insightful, and professional presentations to customers and internal Redspin stakeholders.
• Create, review, and edit findings, observations, and recommendations reports.
• Become knowledgeable of Redspin’s solution and service offerings, sales process, marketing materials, contract and statement of work (SOW) structure, methodologies, delivery standards, work tools, and processes.
• Pursue additional education and stay current on best practices, technical skills, and tools related to the position's duties.
• This position has significant interaction with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors. This position requires a strong customer service orientation and the ability to:
• Work independently on a variety of consulting projects simultaneously,
• Exercise good judgment and initiative to manage priorities,
• Quickly develop trusting relationships with a variety of Defense Industrial Base compliance and information system professionals.
• Pose questions and listen to customer responses effectively to draw out essential facts, data, business process descriptions, sensitivities, and…