Certified CMMC Professional

DigiFlight • Columbia, MD

10h

About The Position

The Certified CMMC Professional (CCP) supports both CMMC readiness engagements and formal assessment activities by evaluating an organization’s cybersecurity practices against CMMC requirements. This role contributes to control implementation validation, documentation analysis, and assessment execution, while ensuring alignment with the CMMC Assessment Process (CAP).

Requirements

• 3–5 years of experience in Cybersecurity, IT audit or compliance, Governance, Risk, and Compliance (GRC), or Information systems or IT operations
• Working knowledge of CMMC Level 1 and Level 2 requirements, NIST SP 800-171, CMMC Assessment Process (CAP), FedRAMP, and SOC 2
• Experience supporting security assessments or audits
• Experience supporting compliance frameworks (e.g., FedRAMP, SOC 2, ISO 27001)
• Familiarity with DoD contractor environments and Controlled Unclassified Information (CUI)
• Analytical thinking and attention to detail
• Ability to interpret control requirements and supporting evidence
• Strong written and verbal communication skills
• Ability to operate in both advisory and assessment roles with discipline

Responsibilities

• Support organizations in preparing for CMMC Level 1 and Level 2 certification
• Perform gap assessments against CMMC requirements and NIST SP 800-171 controls
• Assist in the development and refinement of System Security Plans (SSPs), POA&Ms, policies and procedures
• Help identify and remediate control deficiencies prior to formal assessment
• Provide guidance on control implementation expectations, evidence requirements, and certification boundary considerations

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed