Lead CCA

Vaultes is a rapidly growing cybersecurity and digital services company headquartered in the Washington DC metro area. Serving customers across the Federal government and commercial sectors, we use our broad experience and deep technical expertise to implement customized solutions that enable mission achievement and secure the world through technology. 

FAST: The Vaultes Way

F – Frictionless Collaboration:  We lead with humility and are easy to work with. Our ego-less, one-team mindset keeps progress moving.

A – Accountable & Adaptable: We do what we say we will and own our outcomes. Rooted in a growth mindset, we flex with change and stay aligned to mission needs.

S – Secure by Design: We protect what matters most. Security and integrity guide our decisions, ensuring resilience and confidence for our clients and partners.

T – Trusted Partners: We work side by side with clients and colleagues, earning trust through accountability, openness, and shared success.

About the Role

The Lead CCA (CMMC Certified Assessor) will be a technical resource for the company in assessments, advisory services, and the CMMC program at Vaultes. This is a customer-facing position which requires frequent interactions with high-level stakeholders. The perfect candidate is not only highly qualified for the role but is also enthusiastic about growing alongside our company.

Location: Remote with occasional travel to client site, as needed.

Responsibilities

• Serve as Lead CCA in support of execution of CMMC Level 2 assessments in accordance with the Cybersecurity Maturity Model Certification methodology or work. under the direction of the Lead CCA.
• Participate in assessment planning and coordination activities, contributing to timelines, scope validation, and readiness reviews. 
• Evaluate implementation of security controls aligned to NIST SP 800-171/NIST 800-53, including review of policies, procedures, and system security documentation. 
• Conduct interviews with client personnel and examine technical evidence to validate control implementation and effectiveness. 
• Document assessment activities, observations, and findings with clear traceability to CMMC practices and requirements. 
• Contribute to and/or lead the development of assessment deliverables.
• Communicate assessment progress, risks, and findings to the assessment lead and internal team members. 
• Ensure adherence to Cyber AB and/or FedRAMP standards, maintaining independence, objectivity, and ethical conduct throughout the assessment process. 
• Support client interactions by providing clarification on assessment activities and evidence requests, as needed.
• Collaborate with team members and contribute to continuous improvement of assessment processes, tools, and methodologies.
• Perform other duties as assigned.

Qualifications

• Completed Bachelor’s Degree in Computer Science or related area of study
• Current CISSP Certification 
• Active LCCA Certification
• 10+ Years of experience in cybersecurity 
• Deep understanding of NIST 800-171 and NIST 800-53 standards 
• Demonstrated experience with preparation and completion of assessment packages.
• Strong written and oral communication skills.
• You must be legally authorized to work in the USA. 
• You must be able to obtain and maintain an affirmative suitability determination.

Nice to Haves

• Completed Master’s Degree in Computer Science or related area of study
• Experience as a consultant 

Perks and Benefits

• Paid time off 
• Paid holidays
• Work-from-home opportunities
• 401k with matching incentive
• Medical/dental/vision benefits
• Company provided life insurance
• Company provided short-term disability

Physical Requirements

• Prolonged periods sitting at a desk and working on a computer.
• Capable of operating a computer and other office productivity machinery, and frequently communicate with co-workers, management, and customers.

Vaultes provides equal employment opportunities to all employees and applicants for employment without regard to race, color, creed, ancestry, national origin, citizenship, sex or gender (including pregnancy, childbirth, and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, religion, age, disability, genetic information, service in the military, or any other characteristic protected by applicable federal, state, or local laws and ordinances.