Offer summary

Qualifications:

CMMC Certified Professional (CCP), Certified CMMC Assessor (CCA), or Registered Practitioner Advanced (RPA) certification preferred., Experience in conducting readiness assessments and preparing clients for C3PAO audits., In-depth knowledge of the CMMC framework and related DoD regulations., Strong analytical, problem-solving, and communication skills. .

Key responsibilities:

Conduct comprehensive CMMC readiness assessments to identify compliance gaps and develop remediation plans.

Design and implement security measures in line with CMMC standards to protect sensitive data.

Coordinate with customer teams to develop and document security policies and procedures.

Stay updated on CMMC framework changes and assess their impact on customer compliance.

Job description

CMMC POSITION SUMMARY

Idenhaus Consulting is seeking a highly qualified and experienced Cybersecurity Maturity Model Certification (CMMC) Certified Specialist to join our team. This position is responsible for ensuring our customers meet the cybersecurity standards set by the Department of Defense (DoD) in the United States. The ideal candidate will have a thorough understanding of the CMMC framework and will utilize this knowledge to facilitate comprehensive cybersecurity solutions for our customers.

SPECIFIC JOB RESPONSIBILITIES:

Conduct comprehensive CMMC readiness assessments across customer systems to identify assessment scope, define data flows for Controlled Unclassified Information (CUI), identify any compliance gaps, and develop a remediation plan to prepare the customer for their formal C3PAO audit
Design and implement security measures and controls, in line with CMMC standards, to protect sensitive data and systems from infiltration and cyber-attacks
Coordinate across customer teams to develop and document security policies, SSP and POAM
Review and update of existing security policies and procedures to align with evolving CMMC requirements and best practices in cybersecurity
Keep abreast of updates to the CMMC framework and determine the impact of any regulatory change on the customer’s compliance

REQUIREMENTS:

In addition to technical cybersecurity experience and skills, the qualified candidate must have demonstrated through experience that she/he has the soft skills required to drive engagement with customers. She/he must have experience successfully managing projects, meeting deadlines, and achieving high levels of quality based on standards. Applicants must meet the requirements of Department of Defense (DoD) Manual 8140.03: Applicable 612 Certifications (At minimum, must possess 1 Intermediate Certification).

QUALIFICATIONS, SKILLS, & KNOWLEDGE:

CMMC Certified Professional (CCP), Certified CMMC Assessor (CCA), or Registered Practitioner Advanced (RPA) certification is highly preferred
Experience conducting readiness assessments and preparing clients for C3PAO audits.
Familiarity with federal contracting and DoD cybersecurity requirements
Proven experience in IT security, risk management, or compliance roles
In-depth knowledge of the CMMC framework, NIST SP 800-171, DFARS 252.204-7012, and related Department of Defense (DoD) regulations
Strong analytical and problem-solving skills, particularly in information systems, security, and privacy
Ability to perform effectively under pressure
Demonstrated success in leading and delivering consulting engagements
Excellent verbal and written communication skills, including the ability to explain complex security concepts to non-technical audiences and to produce high-quality technical documentation, policies, and procedures
Self-motivated and able to work independently, proactively leveraging internal resources and taking ownership of work and professional development to deliver value to customers
Effective presentation skills in customer-facing settings

Required profile