Title; External CMMC Certified Assessor; CCP

Position Summary

Coalfire Federal is both an authorized C3

PAO and CMMC RPO. As a Certified CMMC Assessor you’ll work with leading manufacturing, IT, cloud, professional service organizations, and the Defense Industrial Base (DIB) serving the United States Department of Defense (DOD). You will be part of a team that supports these organizations in meeting the Department of Defense’s Cybersecurity Maturity Model Certification and related government regulations by certifying their compliance with CMMC requirements.

CMMC assessor positions are full‑time, remote. Occasional or limited travel may be required based on client needs.

• Work with team members to assess whether DIB members have adequately prepared for CMMC compliance.
• Participate in evaluating an organization’s readiness for assessment, including:
• Collecting and examining evidence, observing, testing, and analyzing results.
• Scoring OSC practices and validating preliminary results.
• Generating preliminary report findings.
• Finalizing findings for an assessment report and delivering recommended assessment results.
• Work independently and as part of a team.
• Communicate professionally with team members and stakeholders.

• Working knowledge of the controls and implementation of DFARS Clause 252.204‑7012 (NIST 800‑171).
• Direct involvement or support with building reports that clearly communicate met and not met objectives in accordance with assessment guidelines.
• Ability to track detailed tasks and ensure timely delivery of project deliverables.
• Excellent communication and problem‑solving skills.
• Critical thinking and the ability to balance security requirements with mission needs.
• Well‑organized, detail‑oriented, and adaptable to change to accomplish assignments.

• Completed Bachelor’s degree from an accredited university, preferably in an IT‑related field.

• US citizenship required.
• Currently possess completed Tier 3 Suitability with the Cyber AB.

• Certified CMMC Professional (CCP) required. Candidates with the experience or pre‑requisites as a CCA professional will also be considered.

• At minimum 5 years of experience in the IT Security / Cybersecurity industry.
• Includes at minimum 2 years in a client‑facing role providing risk assessment (i.e., 171 assessments), advisory services, and/or consulting in a Federal environment.

• Additional cybersecurity certifications and experience highly desired (e.g., CISSP, CISM).
• Previous experience working for a CMMC RPO or C3
  
  PAO (candidate or authorized).
• FedRAMP assessment experience.
• DIB experience.
• In progress or study to obtain the CCA.

• Competitive pay and benefits, including paid parental leave, flexible time off, certification and training reimbursement, digital mental‑health and wellbeing support memberships, and comprehensive insurance options.

Coalfire is an EEO employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.