CCA Lead Assessor - CMMC Services

Coalfire Federal

2d•Remote

About The Position

As a Certified CCA Lead you’ll work with leading manufacturing, IT, Cloud, professional service organizations, and the Defense Industrial Base (DIB) serving the United States Department of Defense (DOD). You will be part of a team that supports the efforts of these organizations to satisfy DOD's Cybersecurity Maturity Model Certification and related government regulations as a Lead assessor to certify organizations’ compliance with CMMC requirements.

Requirements

Working knowledge of the controls and implementation of DFARS Clause 252.204-7012 (NIST 800-171)
Direct involvement with building reports that clearly communicate met and not met objectives in accordance with assessment guidelines
Ability to track detailed tasks and ensure timely delivery of project deliverables
Excellent communication and problem-solving skills
Critical thinking, and ability to balance security requirements with mission needs
Must be well-organized and detail-oriented with the ability to coordinate, prioritize multiple tasks, and be adaptable to change to accomplish assignments
Ability to work independently and as a part of a team
Professional and polished interpersonal and communication skills with team members and stakeholders
Experience, charisma, and enthusiasm to lead teams, build capabilities, and ability to serve as a trusted advisor
Hands on security and consulting experience
Flourishes in a fast-paced, collaborative work environment
Excellent communication and client-facing skills
Completed Bachelor’s degree from an accredited university, preferably in an IT related field.
US Citizenship Required
Currently possess completed Tier 3 Suitability with the Cyber AB
Required: Completed CCA Certification with Lead Designation (LCCA), with completed/active Tier 3 Suitability with the Cyber AB Candidates with the experience and the pre-requisites to become certified as CCA Lead will also be considered
7+ years of overall experience in the IT Security / Cybersecurity industry
To include at minimum 3+ years in a Client facing role providing risk assessment, advisory services, and/or consulting - ideally in a federal environment
Previous experience working for a CMMC RPO or C3PAO (Candidate or Authorized), or other 3PAO assessments

Nice To Haves

Additional cybersecurity certifications and experience highly desired (i.e, CISSP, CISM).
Experience with NIST 800-37, NIST 800-53, and FISMA.
Experience with FedRAMP assessments and cloud security
DIB experience

Responsibilities

support and help lead team members in assessing whether members of the DIB have adequately prepared for compliance with CMMC regulations
participate and support their team that will evaluate an organization’s readiness for assessment, which include the experience and capability for tasks such as:
collect and examine evidence, observe, test and analyze results
clearly and effectively score OSC practices and validate preliminary results
generate preliminary report findings
finalize findings for an assessment report and deliver recommended assessment results