Key Facts

Remote From:

Freelance

Mid-level (2-5 years)

English

Hard Skills

Standard Operating Procedure NIST 800 NIST 800 Evidence Analysis Gap Analysis FedRAMP Literary Studies Common Assessment Framework Narrative Therapy Policy Development Interface Control Document Control System Design Plan Of Action And Milestones (POA&M) Crosswalk Organizational Structure Stakeholder Engagement Technical Writing Internal Documentation Remote Administration

Other Skills

•
Procedure Development
•
Professionalism

Roles & Responsibilities

3-5 years of relevant experience in GRC, cybersecurity compliance, or related consulting work
Hands-on experience with CMMC-related work
Experience working with SSPs, policies, procedures, evidence collection, and remediation documentation
Familiarity with NIST SP 800-171, NIST SP 800-53, and FedRAMP

Requirements:

Support client engagements related to CMMC readiness, implementation, and documentation
Develop, update, and maintain System Security Plans (SSPs)
Gather, organize, and review evidence supporting control implementation
Identify gaps and support development of POAMs and remediation tracking

Hotman Group, LLC

About Hotman Group, LLC

Since 2016, Hotman Group has worked with hundreds of business leaders to help them feel more confident in their cybersecurity programs. We take the build - implement - run approach to ensure each client is fully equipped to do the right thing when it comes to cybersecurity. First, we start with an assessment to determine where you are based on a benchmark within a security compliance framework like SOC 2, NIST CSF, and others. Then, we strategically prioritize your action items based on the risks to your business. Lastly, we help you set the bar based on the objective you'd like to reach.From a self-governed discipline to an all-inclusive cybersecurity program to the strictest audits, we help you handle it all. Most companies look at their cybersecurity piecemeal, inadvertently putting themselves at risk. With Hotman Group, we approach cybersecurity strategically, with a plan so you can be fully protected. Specialities: vCISO/ Fractional CISO, Cybersecurity, Risk Assessment, Gap Assessment, Maturity, Assessment, SOC 2, HITRUST, HIPAA, NIST CSF, NIST 800-53, ISO 27001, FFIEC, SOC 2 Readiness, Remediation, Auditor Support, Regulator Support, SOC 2 Audit, Data Protection (PHI, PII, PI), Risk Management (ERM), Privacy (GDPR, CCPA, SOC 2), GRC, Third Party Risk Management (TPRM), Supply Chain Risk, Vendor Risk, Business Continuity, Disaster Recovery, Business Impact Analysis (BIA), Metrics, Breach Support, Incident Response (IR), Tabletops

Company type: Small startup

Founded: 2018

Company size: 2 - 10

Website LinkedIn See all jobs →

Job description

Hotman Group is seeking a CMMC / NIST Consultant / Analyst to support client projects involving CMMC, SSP development, NIST SP 800-171, NIST SP 800-53, FedRAMP, evidence collection, control documentation, and remediation tracking.

This is a contract role that may be structured as part-time or full-time based on project needs and candidate availability. We are looking for a mid-level practitioner who can contribute to active client delivery work, produce strong documentation, and help move projects forward in a remote consulting environment.

What You’ll Do

Support client engagements related to CMMC readiness, implementation, and documentation
Develop, update, and maintain System Security Plans (SSPs)
Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverables
Gather, organize, and review evidence supporting control implementation
Draft and refine control narratives, policies, procedures, and related compliance documentation
Identify gaps and support development of POA&Ms and remediation tracking
Work with client stakeholders to collect information, validate details, and keep deliverables moving
Contribute to readiness efforts tied to assessments, documentation, and ongoing compliance activities

What we're looking for

3-5 years of relevant experience in GRC, cybersecurity compliance, or related consulting work
Hands-on experience with CMMC-related work (Required)
Experience working with SSPs, policies, procedures, evidence collection, and remediation documentation (Required)
Familiarity with NIST SP 800-171, NIST SP 800-53, and FedRAMP
Strong writing and documentation skills
Ability to work independently in a remote environment
Strong organization, follow-through, and professionalism in client-facing work
Comfort stepping into active projects and supporting delivery work with minimal hand-holding

Nice to Have

Experience supporting CMMC Level 2 efforts
Experience with CUI scoping, enclaves, or boundary discussions
Familiarity with POA&Ms, assessment readiness, and control crosswalks
Certifications such as CCP, CCA, CISSP, CISM, or CISA

Requirements

Authorized to work in the U.S.
Able to pass a background check
Reliable high-speed internet and a secure remote work setup

About Hotman Group

Hotman Group is a remote boutique cybersecurity and GRC firm supporting clients across a range of industries and compliance needs. We value strong writing, quality work, collaboration, sound judgment, and practical execution.

This role is a strong fit for someone who wants to contribute to meaningful CMMC project work in a contract capacity, whether that means part-time project support or full-time contract availability.

Ready to apply?

APPLY

Share ·