[Hiring] CMMC Level 2 Certified Assessor @Velero

Role Description

We seek a highly skilled CMMC Level 2 Certified Assessor (CCA) to join our team on a project basis. The ideal candidate will have a proven track record in information security, compliance, and auditing, with expertise in NIST 800-171 standards and the CMMC Assessment Process. This role involves conducting official CMMC Level 2 assessments for organizations seeking certification, preparing detailed audit reports, and ensuring alignment with the standards set by the CMMC Accreditation Body (CMMC-AB).

• Perform official CMMC Level 2 assessments for organizations seeking certification.
• Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance gaps.
• Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards.
• Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ensure assessments meet accreditation requirements.
• Guide organizations through the formal CMMC assessment process, ensuring readiness and compliance with certification criteria.
• Stay updated on CMMC requirements, standards, and best practices changes.

Qualifications

• Minimum of 5 years of experience in information security auditing, with a strong focus on NIST SP 800-171 compliance.
• Proven experience conducting formal compliance audits and security assessments.
• Familiarity with the Cybersecurity Maturity Model Certification (CMMC) Assessment Process and documentation requirements.
• Strong knowledge of NIST SP 800-171 standards, security controls, and compliance requirements.
• Deep understanding of information security principles, risk management, and audit methodologies.
• Excellent written and verbal communication skills, with the ability to create detailed, high-quality assessment reports.

Requirements

• CMMC Certified Assessor (CCA) certification.
• Candidates must currently hold, have previously held, or be willing to obtain the certification under client sponsorship.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Authorization Professional (CAP)

Benefits

• Flexible, project-based engagements with the opportunity to work on high-impact cybersecurity compliance initiatives.
• Competitive hourly compensation based on experience, certifications, and project scope.
• Opportunity to work on 80+ hour engagements with established clients across regulated industries.