Note: The job is a remote job and is open to candidates in USA. C3 Integrated Solutions is a rapidly growing company specializing in cybersecurity and compliance services. They are seeking a Dedicated Assessment Consultant to lead client assessments in the Cybersecurity Maturity Model Certification (CMMC) program, project managing assessments and collaborating with various stakeholders to ensure compliance and successful outcomes.
Responsibilities
- Review and prepare client documentation to ensure successful pre-assessments and assessments
- Conduct gap analyses to identify areas of non-compliance and develop remediation plans
- Project manage client assessments by contacting, organizing, and facilitating stakeholders and interested parties before, during, and after assessments
- Validate system scope (technology, people, business processes) for compliance
- Perform QA/QC and validate artifacts and evidence and ensure client success prior to assessment
- Manage, validate, and defend System Security Plan(s), policies, and procedures in CMMC assessments
- Manage customer expectations, internal and external resources, and relevant third parties to ensure engagements are successful
- Facilitate post-assessment debriefings with clients to review findings and next steps
- Provide ongoing advisory to clients on issues related to security and compliance
- Provide expert guidance on interpreting compliance requirements and translating them into actionable steps for clients
- Develop and maintain subject matter expertise in the laws, regulations, and government-wide policies that govern cybersecurity data protection for the U.S. Defense Industrial Base, including:
- DFARS (NIST SP 800-171, FedRAMP equivalency)
- CMMC (Levels 1 & 2, boundary scoping)
- CUI Program (NARA CUI Registry, CUI/CDI/CTI, FCI)
- Export controls (ITAR/EAR)
- Assist team members with client needs as needed
- Analyze assessment results and provide strategic recommendations for improving C3’s services
- Contribute to the development of internal best practices and methodologies for conducting assessments
- Mentor junior team members on assessment techniques and client management strategies
Skills
- Subject matter expertise in CMMC assessment and certification requirements (including assessment objectives up to Level 2) and DFARS 252.204-7012 requirements (including FedRAMP Moderate equivalency requirements for cloud service providers and paragraph (c) – (g) requirements)
- Technical understanding and experience leveraging Microsoft cloud services (Azure, Office 365) to meet compliance requirements, especially in Azure Government and Microsoft 365 GCC High environments
- 7 or more years of experience implementing cybersecurity requirements for Department of Defense contractors (DFARS 252.204-7012, NIST SP 800-171) or federal information systems (RMF, NIST SP 800-53)
- Very strong written and verbal communication skills, with the ability to convey technical information as a subject matter expert (SME) for various compliance frameworks
- High emotional intelligence and interpersonal skills, with an enthusiasm for collaboration and coordination with various client company stakeholders from executive management to entry-level staff
- Strong organizational and time management skills with ability to correctly prioritize workload to maintain schedules, deadlines, and standards on assigned projects
- Ability to remain calm under pressure and be adaptable
- Ability to cross-train into other specialties
- Awareness of the cybersecurity product/vendor landscape and current security best practices
- Awareness of U.S. export control requirements under ITAR and EAR
- Experience consulting with multiple clients at the same time
- Bachelor's degree or higher in technology, engineering, or related field
- Ability to obtain U.S. government security clearance
- Cyber AB's CCP is required; CCA is preferred
- Microsoft AZ-500 certification, highly preferred
Benefits
- Remote work opportunities
- Medical, Dental, Vision Insurance
- Four Weeks of Paid Time Off (vacation & sick leave)
- Four weeks of Paid Maternity and Paternity leave
- Two days of Paid Volunteer Time
- 401(k) with 4% Company Match
- Company Bonus Structure
- Tuition Reimbursement
- Employer-sponsored Disability & Life Insurance
- Professional Development
Company Overview