CMMC Consultant, CCA at CLEARWATER SECURITY & COMPLIANCE LLC

Nashville, Tennessee, United States -

Full Time

Start Date

Immediate

Expiry Date

20 May, 26

Salary

145000.0

Posted On

19 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

CMMC Framework, Cybersecurity Assessments, Security Controls Implementation, Action Plan Development, Policy Review, Threat Monitoring, Project Management, Stakeholder Communication, Presentation Delivery, Risk Management, NIST SP 800-171, DFARS 252.204-7012, Analytical Skills, Technical Writing, Customer Service Orientation, Team Leadership

Industry

Computer and Network Security

Description

Description Description ABOUT US Redspin, a division of Clearwater, is a leading provider of cybersecurity, compliance, consulting, and managed services for the Defense Industrial Base. Our solutions enable organizations to avoid preventable breaches, protect Department of Defense contractors and their data, meet regulatory requirements, and optimize cybersecurity investments. Redspin is a recognized leader in the CMMC space. We were the first Authorized C3PAO and the first to conduct a passing JSVAP assessment. We are a trusted partner for the Fortune 500, and small to mid-size businesses. POSITION SUMMARY We are seeking a highly qualified and experienced Cybersecurity Maturity Model Certification (CMMC) Certified Assessor to join our team. This position is responsible for ensuring our organization meets the stringent cybersecurity standards set by the Department of Defense (DoD) in the United States. The ideal candidate will have a thorough understanding of the CMMC framework and will utilize this knowledge to facilitate comprehensive cybersecurity solutions for our company. The Consultant will dedicate 80% of their time to client billable work, which equates to 1,664 hours over the course of a calendar year. SPECIFIC JOB RESPONSIBILITIES Conduct comprehensive assessments of Defense Industrial Base (DIB) organizational networks and systems to identify any vulnerabilities and to confirm they meet the necessary CMMC level requirements. Work with organizations to design and implement security measures and controls, in line with CMMC standards, to protect sensitive data and systems from infiltration and cyber-attacks. Coordinate with various teams within an organization to develop and implement the action plans necessary to achieve CMMC compliance. Assist organizations with the review and update of existing security policies and procedures to align with evolving CMMC requirements and best practices in cybersecurity. Prepare detailed reports on the status of an organization’s CMMC compliance. Keep abreast of the latest cybersecurity threats and trends, as well as updates to the CMMC framework. Achieve utilization targets, complete projects on time and budget, and meet quality standards. Study, learn, test, document, execute and seek to continuously improve scalable consulting services processes to effectively deliver customer engagements while achieving a high level of customer satisfaction. Execute project planning, scheduling, and other coordination of internal and customer resources to conduct interviews, meetings, and presentations. Prepare and deliver thoughtful, insightful, and professional presentations to customers and internal Redspin stakeholders. Create, review and edit findings, observations, and recommendations reports. Become knowledgeable of Redspin’s solution and service offerings, sales process, marketing materials, contract and SOW structure, methodologies, delivery standards, work tools, and processes. Pursue additional education and stay current on best practices, technical skills, and tools related to the position’s duties. This position has significant interaction with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors. This position requires a strong customer service orientation and the ability to: Work independently on a variety of projects simultaneously, Exercise good judgment and initiative to manage priorities, Quickly develop trusting relationships with a variety of Defense Industrial Base compliance and information system professionals, Pose questions and listen to customer responses effectively to draw out essential facts, data, business process descriptions, sensitivities, and perspectives, and Demonstrate strong organizational abilities, effective writing skills, and communications skills. Develop presentations with clear messages, and effective slides, and deliver these presentations to senior executives Lead teams of internal and external stakeholders to drive security projects forward Identify and manage client engagement risks and issues Requirements Requirement In addition to technical cybersecurity experience and skills, the qualified candidate must have demonstrated through experience that she/he has the soft skills required to drive engagement with customers. She/he must have experience successfully managing projects, meeting deadlines, and achieving high levels of quality based on standards. Applicants must meet the requirements of Department of Defense (DoD) Manual 8140.03: Applicable 612 Certifications (At minimum, must possess 1 Intermediate Certification). QUALIFICATIONS, SKILLS, & KNOWLEDGE Bachelor’s degree in information technology, Computer Science, or 4+ years of equivalent experience in IT security, risk management, or compliance. Current certification as a Certified CMMC Professional (CCA) is preferred, or the ability to achieve CCA credential under the CMMC version 2.0 framework is required. Proven experience in a role focused on IT security, risk management, or compliance. In-depth knowledge of the CMMC framework, NIST SP 800-171, DFARS 252.204-7012 and associated Department of Defense (DoD) regulations. Excellent problem-solving skills and the ability to function effectively under pressure. Superior communication skills with the ability to explain complex security concepts to non-technical staff. Ability to lead projects and drive them to completion. Advanced knowledge of various cybersecurity technologies and solutions. Drive to constantly improve what and how we deliver value to our customers Self-starters who can work independently, seek out and leverage internal resources when needed, proactively take ownership of their work and career, and drive engagements to provide the value our customers expect Relevant experience and prior success leading and delivering consulting engagements Relevant technical training, project management training, and certifications such as CISSP Excellent analytic and problem-solving skills, especially in the information systems, security, and privacy space Highly effective verbal communications and presentation skills in a customer setting Excellent technical written communication skills, in particular, regarding information system, security and privacy subject matter, policies and procedures Experience with creating and executing repeatable work processes and procedures Experience with providing technical/product support services within a sales process Ability to learn new subject matter and context quickly and to maintain market and subject matter awareness Ability to understand SOWs, customer proposals, project notes, deliverables, and final reports; assimilate previous experience, relevant subject matter, data, facts, and results; and develop relevant questions of colleagues to hasten understanding scenarios, methodologies, processes, and “lessons learned.” Demonstrated ability to work effectively with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors. COMPENSATION & BENEFITS Base Salary Participation in Company’s Medical/RX, Disability, Life/ADD Insurance, and 401K benefit programs. Flexible Time Off (FTO) vacation policy. The base salary range for this role is $__120,000_________ to $_____145,000______. Base salary is part of our total rewards package which also includes the opportunity for merit-based salary increases, eligibility for our 401(k) plan, medical, dental, vision, life and disability insurances and leaves provided in line with your work state. Our robust time-off policy includes flexible paid time off, 11 paid holidays, and paid sick time. Total compensation, including base salary to be offered, will depend on elements unique to each candidate, including applicable candidate experience, skills, education and other factors permitted by law.Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.Clearwater is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. If you require a reasonable accommodation to complete an application, interview or otherwise participate in the recruiting process, please direct your inquiries to a recruiter @ 615-669-8896 or jobs@clearwatersecurity.com. This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the form I-9. For more information on E-Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS. 888-897-7781

Responsibilities

This role involves conducting comprehensive assessments of Defense Industrial Base networks against CMMC requirements, designing and implementing necessary security controls, and coordinating compliance action plans for clients. The consultant will also be responsible for preparing detailed compliance reports and continuously improving consulting service processes.