International CMMC Certified Professional

View full description

Requirements:

• At least 1-3 years of experience performing IT audit engagements at a Big 4 or other audit/consulting firm.
• Candidates possessing an active CMMC certification or working towards a CMMC certification such as RP, RPA or CCP.
• A candidate on a path to secure a CMMC certification within six months, must possess an approved Intermediate Certification such as: (ISC)2 CGRC/CAP, CompTIA CASP+, CompTIA Cloud+, CompTIA PenTest+, CompTIA Security+, GIAC GSEC

Responsibilities:

• Develop a comprehensive assessment plan outlining the scope, objectives, and methodology for evaluating the organization's cybersecurity practices and controls.
• Assess the organization's adherence to the CMMC framework by reviewing policies, procedures, and technical security controls to ensure they meet the required maturity level.
• Gather and analyze relevant documentation, including system configurations, security policies, incident response plans, and training materials.
• Engage with key personnel within the organization to understand the implementation of cybersecurity practices and gauge their familiarity with security protocols.
• Identify potential risks and vulnerabilities in the organization’s cybersecurity posture, determining their potential impact on safeguarding governmental data.
• Create detailed reports that document assessment findings, highlighting areas of compliance and non-compliance, along with recommendations for improvement.
• Offer expert advice and best practices to help organizations enhance their cybersecurity measures and achieve compliance with CMMC requirements.
• Conduct follow-up assessments to verify that corrective actions have been implemented, and that the organization is on track to achieve or maintain compliance.
• Stay updated on changes in the CMMC framework, cybersecurity threats, and mitigation strategies to provide the most relevant and effective assessments.
• Maintain clear communication with clients throughout the assessment process to ensure understanding and facilitate collaboration.
• Assist the Lead assessor in gathering and evaluating assessment evidence.
• Evaluates the design and effectiveness of controls.
• Identifies and communicates preliminary assessment findings for daily checkpoint meetings.
• Foster stakeholder relationships through proactive communication with clients, colleagues and partners.
• Proactively communicate with management regarding any potential issues.