CMMC Consultant, CCP

Role Overview

• Conduct comprehensive assessments of Defense Industrial Base (DIB) organizational networks and systems to identify any vulnerabilities and to confirm they meet the necessary CMMC level requirements.
• Work with organizations to design and implement security measures and controls, in line with CMMC standards, to protect sensitive data and systems from infiltration and cyber-attacks.
• Coordinate with various teams within an organization to develop and implement the action plans necessary to achieve CMMC compliance.
• Clearly articulate the CMMC program to an organization's employees at all levels to ensure understanding and adherence to cybersecurity best practices.
• Assist organizations with the review and update of existing security policies and procedures to align with evolving CMMC requirements and best practices in cybersecurity.
• Prepare detailed reports on the status of an organization's CMMC compliance.
• Keep abreast of the latest cybersecurity threats and trends, as well as updates to the CMMC framework.
• Achieve utilization targets, complete projects on time and budget, and meet quality standards.
• Study, learn, test, document, execute and seek to continuously improve scalable consulting services processes to effectively deliver customer engagements while achieving a high level of customer satisfaction.
• Execute project planning, scheduling, and other coordination of internal and customer resources to conduct interviews, meetings, and presentations.
• Prepare and deliver thoughtful, insightful, and professional presentations to customers and internal Redspin stakeholders.
• Create, review, and edit findings, observations, and recommendations reports.
• Become knowledgeable of Redspin’s solution and service offerings, sales process, marketing materials, contract and statement of work (SOW) structure, methodologies, delivery standards, work tools, and processes.
• Pursue additional education and stay current on best practices, technical skills, and tools related to the position's duties.
• This position has significant interaction with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors.
• This position requires a strong customer service orientation and the ability to:
• Work independently on a variety of consulting projects simultaneously,
• Exercise good judgment and initiative to manage priorities,
• Quickly develop trusting relationships with a variety of Defense Industrial Base compliance and information system professionals.
• Pose questions and listen to customer responses effectively to draw out essential facts, data, business process descriptions, sensitivities, and perspectives.
• Demonstrate strong organizational abilities, effective writing skills, and communications skills.
• Develop presentations with clear messages, and effective slides, and deliver these presentations to senior executives.
• Lead teams of internal and external stakeholders to drive security projects forward.
• Identify and manage client engagement risks and issues.

Requirements

• Bachelor’s degree in information technology, Computer Science, or 4+ years of equivalent experience in IT security, risk management, or compliance.
• Current certification as a Certified CMMC Professional (CCP) is preferred, or the ability to achieve CCP credential under the CMMC version 2.0 framework is required.
• The ability to achieve a Certified CMMC Assessor (CCA) credential under the CMMC version 2.0 framework is required.
• In-depth knowledge of the CMMC framework, NIST SP 800-171, and DFARS 252.204-7012 regulations.
• Excellent problem-solving skills and the ability to function effectively under pressure.
• Superior communication skills with the ability to explain complex security concepts to non-technical staff.
• Ability to lead projects and drive them to completion.
• Advanced knowledge of various cybersecurity technologies and solutions.
• Self-starters who can work independently, seek out and leverage internal resources when needed, proactively take ownership of their work and career, and drive engagements to provide the value our customers expect.
• Relevant experience and prior success leading and delivering consulting engagements.
• Relevant technical training, project management training, and certifications such as CISSP.
• Excellent analytic and problem-solving skills, especially in the information systems, security, and privacy space.
• Highly effective verbal communications and presentation skills in a customer setting.
• Excellent technical written communication skills, in particular, regarding information system, security and privacy subject matter, policies and procedures.
• Ability to learn new subject matter and context quickly and to maintain market and subject matter awareness.
• Ability to understand SOWs, customer proposals, project notes, deliverables, and final reports; assimilate previous experience, relevant subject matter, data, facts, and results; and develop relevant questions of colleagues to hasten understanding scenarios, methodologies, processes, and “lessons learned.”
• Demonstrated ability to work effectively with internal and external stakeholders, including colleagues, customers, partners, subcontractors, and potential investors.

Tech Stack

• Cyber Security

Benefits

• 401(k) plan
• medical, dental, vision, life and disability insurances
• flexible paid time off
• 11 paid holidays
• paid sick time