CMMC Certified Assessor (CCP)

Coalfire Federal is a market leading cybersecurity consultancy firm providing independent advice, assessments, technical testing, and cyber engineering services to Federal agency customers. They are thought leaders and passionate problem-solvers in cybersecurity, with offices across the US and Europe.

Location: Remote (US)

Responsibilities

• Assess whether members of the DIB have adequately prepared for compliance with CMMC regulations.
• Evaluate an organization’s readiness for assessment, including collecting and examining evidence, observing, testing, and analyzing results.
• Score OSC practices and validate preliminary results.
• Generate preliminary report findings.
• Finalize findings for an assessment report and deliver recommended assessment results.

Requirements

• Working knowledge of the controls and implementation of DFARS Clause 252.204-7012 (NIST 800-171).
• Experience building reports that communicate met and not met objectives in accordance with assessment guidelines.
• Ability to track detailed tasks and ensure timely delivery of project deliverables.
• Excellent communication and problem-solving skills.
• Critical thinking and ability to balance security requirements with mission needs.
• Well-organized and detail-oriented with the ability to coordinate, prioritize multiple tasks, and adapt to change.

Benefits

• Opportunities for professional growth and development.
• Participation in employee resource groups and events.
• Competitive perks and benefits including paid parental leave, flexible time off, certification and training reimbursement, mental health support memberships, and comprehensive insurance options.

Additional Information

• Position is full-time remote with occasional or limited travel.
• Must be a US citizen and possess completed Tier 3 Suitability with the Cyber AB.
• Required certifications include Certified CMMC Professional (CCP) or equivalent experience.
• Minimum 5 years of experience in IT Security/Cybersecurity, including 2 years in a client-facing role providing risk assessment or consulting in a Federal environment.
• Additional cybersecurity certifications like CISSP or CISM are highly desired.
• Previous experience working for a CMMC RPO or C3PAO, FedRAMP assessment, or DIB experience is a plus.