CCA Assessor - CMMC Services

Coalfire Federal

1d•Remote

About The Position

As a Certified CCA Assessor you’ll work with leading manufacturing, IT, Cloud, professional service organizations, and the Defense Industrial Base (DIB) serving the United States Department of Defense (DOD). You will be part of a team that supports the efforts of these organizations to satisfy DOD's Cybersecurity Maturity Model Certification and related government regulations as an assessor to certify organizations’ compliance with CMMC requirements. Location Details All CMMC Assessor positions are full time remote. Occasional or limited travel may vary based on client needs.

Requirements

Working knowledge of the controls and implementation of DFARS Clause 252.204-7012 (NIST 800-171)
Direct involvement with building reports that clearly communicate met and not met objectives in accordance with assessment guidelines
Ability to track detailed tasks and ensure timely delivery of project deliverables
Excellent communication and problem-solving skills
Critical thinking, and ability to balance security requirements with mission needs
Must be well-organized and detail-oriented with the ability to coordinate, prioritize multiple tasks, and be adaptable to change to accomplish assignments
Ability to work independently and as a part of a team
Professional and polished interpersonal and communication skills with team members and stakeholders
Hands on security and consulting experience
Completed Bachelor’s degree from an accredited university, preferably in an IT related field.
US Citizenship Required
Currently possess completed Tier 3 Suitability with the Cyber AB
Completed CCA Certification, with completed/active Tier 3 Suitability with the Cyber AB
Minimum 5 to 7 years of overall experience in the IT Security / Cybersecurity industry
To include overall 3 years in a Client facing role providing risk assessment, advisory services, and/or consulting - ideally in a federal environment
Previous experience working for a CMMC RPO or C3PAO (Candidate or Authorized), or other 3PAO assessments is preferred

Nice To Haves

Additional cybersecurity certifications and experience highly desired (i.e, CISSP, CISM).
Experience with NIST 800-37, NIST 800-53, and FISMA.
Experience with FedRAMP assessments and cloud security
DIB experience

Responsibilities

support assessing whether members of the DIB have adequately prepared for compliance with CMMC regulations
collect and examine evidence, observe, test and analyze results
clearly and effectively score OSC practices and validate preliminary results
generate preliminary report findings
finalize findings for an assessment report and deliver recommended assessment results