CMMC Consultant for Cybersecurity Consulting Firm

We are a boutique cybersecurity consulting firm seeking an experienced CMMC consultant to join our team on a contract basis to support growing client demand.

**About the Role:**
You'll work directly with clients—primarily government contractors and organizations pursuing CMMC certification—providing expert guidance through the compliance process. This is a client-facing role where your ability to translate complex compliance requirements into actionable business strategies is essential.

What You'll Do:
- Conduct CMMC readiness assessments and gap analyses
- Guide clients through CMMC Level 1 and Level 2 compliance requirements
- Develop and review System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms)
- Provide remediation guidance and implementation support
- Communicate compliance requirements to non-technical stakeholders and executives
- Collaborate with our existing team of certified professionals

What We're Looking For:
- Active CMMC Registered Practitioner (RP) or Certified Assessor (CA) certification preferred
- Demonstrable CMMC consulting experience
- Strong knowledge of NIST SP800-171 and DFARS compliance
- Experience with compliance management platforms (Hyperproof, SecureFrame, or IntelliGRC strongly preferred)
- Excellent communication skills with ability to explain technical concepts to business leaders
- Experience working independently with clients in a consulting capacity
- Bonus: SOC 2 and ISO 27001 experience, preferably audit prep and taking clients through audits.

**Project Details:**
- Contract/hourly basis with potential for ongoing work
- Remote position with flexible scheduling

Please include your relevant certifications and 2-3 client success examples in your proposal.

• Provide CMMC consulting services
• SOC 2 prep and ISO (potentially)
• Light vCISO work
• Engage with clients directly