CCA Consultant

**NO 3rd Parties or Sponsorship!

Role Title: CCA Consultant

Duration: 4-6 week sprints, but 6-month to a year contract

Preferred Location: Remote - EST

Our client is seeking experienced CMMC Certified Assessors to support a growing portfolio of CMMC Level 2 assessment engagements for Department of Defense (DoD) contractors. This role will support formal assessment activities across multiple client engagements and work closely with assessment teams, client stakeholders, and security professionals to evaluate compliance with CMMC and NIST 800-171 requirements.

Due to a strong pipeline of upcoming projects, the expectation is for long-term utilization across multiple assessments rather than a single short-term engagement.

Responsibilities:

• Participate in and support CMMC Level 2 assessments for DoD contractors
• Review and evaluate security controls aligned to NIST SP 800-171 and CMMC requirements
• Conduct evidence reviews, interviews, and testing activities as part of the assessment process
• Evaluate System Security Plans (SSPs), POA&Ms, policies, procedures, and supporting artifacts
• Document assessment findings and support assessment reporting activities
• Collaborate with client stakeholders to validate control implementation and compliance posture
• Support multiple assessment engagements as project demand requires
• Contribute to overall assessment quality, consistency, and client success

Requirements:

• Active CMMC Certified Assessor (CCA) certification required
• Lead CCA (LCCA) certification strongly preferred
• Strong knowledge of CMMC 2.0, NIST SP 800-171, and related assessment methodologies
• Experience performing security assessments, audits, control validation, or compliance reviews
• Experience reviewing SSPs, POA&Ms, and supporting compliance documentation
• Excellent communication and stakeholder engagement skills
  Preferred Qualifications
• Experience supporting or participating in CMMC assessment activities
• DoD, federal, RMF, NIST 800-53, or FedRAMP experience
• Prior experience working with assessment teams, auditors, or compliance organizations
• Active or previous security clearance is a plus