OT & CMMC Cybersecurity Expert

Role: OT & CMMC Cybersecurity Expert
Location: USA

Role Overview

We are seeking an experienced OT & CMMC Cybersecurity Expert to assess and strengthen the security of Operational Technology (OT) environments and ensure compliance with Cybersecurity Maturity Model Certification (CMMC) requirements. The resource will evaluate existing security controls, identify compliance gaps, and collaborate with IT, OT, engineering, and compliance teams to improve security posture and certification readiness.

Key Responsibilities

• Assess OT/ICS environments, including SCADA systems, PLCs, industrial networks, and associated infrastructure, to identify cybersecurity risks.
• Evaluate applicable CMMC requirements and conduct gap assessments against the required CMMC level, including relevant NIST requirements.
• Review OT network architecture, segmentation, remote access, identity and access management, and vulnerability management.
• Develop remediation plans, recommend security improvements, and support implementation of appropriate technical and procedural controls.
• Prepare compliance documentation, policies, procedures, evidence repositories, and control-mapping matrices to support CMMC compliance.
• Collaborate with IT security, OT engineering, infrastructure, risk, and compliance stakeholders to align cybersecurity controls.
• Support risk assessments, remediation tracking, audit preparation, and ongoing compliance improvement activities.

Required Skills & Qualifications

• Strong experience in OT/ICS cybersecurity, industrial network security, or industrial control systems security.
• Working knowledge of SCADA, PLCs, industrial protocols, OT network architecture, and IT/OT segmentation.
• Experience with CMMC requirements, NIST SP 800-171, and applicable NIST SP 800-172 requirements.
• Knowledge of security controls covering access management, multifactor authentication (MFA), secure remote access, and vulnerability management.
• Experience conducting cybersecurity gap assessments, documenting findings, and developing remediation plans.
• Strong stakeholder management, technical documentation, and communication skills.