- Company Name
- Kieri Solutions | Authorized C3PAO
- Job Title
- CMMC Cybersecurity Assessor
- Job Description
-
**Job Title:** CMMC Cybersecurity Assessor
**Role Summary:**
Perform Cybersecurity Maturity Model Certification (CMMC) assessments for organizations, evaluate IT environments against multiple security frameworks, document findings, and communicate results to stakeholders. Remote work with up to 25% travel; requires active security clearance and strong analytical abilities.
**Expectations:**
- Minimum 5 years of IT experience covering networking, servers, virtualization, and endpoints.
- Proven experience with cybersecurity compliance frameworks (e.g., NIST SP 800‑171, RMF, FedRAMP, ISO 27001, SOC, PCI).
- Active U.S. government security clearance.
- Ability to work independently, self‑study, and obtain required certifications.
- Availability for occasional onsite visits (up to 25% travel).
**Key Responsibilities:**
- Conduct full‑scope CMMC assessments for client organizations.
- Analyze and evaluate network architecture, server infrastructure, virtual environments, and endpoint devices.
- Map client controls to applicable frameworks (NIST SP 800‑171, RMF, FedRAMP, ISO 27001, SOC, PCI).
- Produce detailed assessment reports and present findings to technical and non‑technical audiences.
- Collaborate with client teams to remediate gaps and achieve certification readiness.
- Maintain accurate documentation and audit trails per compliance requirements.
**Required Skills:**
- Deep knowledge of networking, server administration, virtualization, and endpoint management.
- Hands‑on experience with NIST SP 800‑171, RMF, FedRAMP, ISO 27001, SOC, PCI compliance.
- Strong analytical, technical writing, and verbal communication skills.
- Proficiency in security assessment tools and documentation standards.
- Ability to prioritize tasks and manage multiple assessments simultaneously.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent professional experience).
- Active U.S. government security clearance (e.g., Secret or Top Secret).
- Preferred certifications: Certified Cybersecurity Practitioner (CCP), Certified Cybersecurity Assessor (CCA), CMMC‑specific credentials.
- Additional certifications such as CISSP, CISM, or similar are advantageous.