IntelliGRC Setup for CMMC Compliance

A small U.S. defense contractor is preparing for CMMC 2.0 Level 2 compliance. We have already produced the required CMMC documentation and have selected IntelliGRC as our GRC platform. Separately, we are migrating to Microsoft GCC High (including Box files to Azure, M365, and a virtual computer environment) through a separate contract. We are seeking an experienced freelancer to fully set up and populate our IntelliGRC instance so that it becomes our operational system of record for CMMC compliance. Scope of Work Configure the IntelliGRC platform for our organization (tenant setup, users/roles as appropriate). Perform or refine asset scoping and system boundary definition aligned with CMMC requirements and our forthcoming GCC High environment. Map and import our existing CMMC documentation (policies, procedures, SSP elements, etc.) into the platform. Establish control implementation statements, evidence repositories, and mapping to NIST SP 800 ONE SEVEN ONE / CMMC Level 2 practices. Create or refine POA&Ms, gap tracking, and continuous monitoring elements within IntelliGRC. Align platform configuration with the technical realities of a Microsoft GCC High / Azure Government environment where relevant. Provide knowledge transfer and basic training so our small internal team can maintain the system going forward. Deliver a clean, audit-ready configuration ready for ongoing use and eventual assessment support. Required Qualifications Hands-on experience implementing CMMC 2.0 Level 2 / NIST SP 800 ONE SEVEN ONE programs for small Defense Industrial Base organizations . Direct experience configuring and populating GRC platforms. Prior IntelliGRC experience is strongly preferred; transferable experience with comparable CMMC-oriented or multi-tenant GRC tools is acceptable. Proven ability to map existing compliance documentation, asset inventories, evidence, and POA&Ms into a GRC platform. Familiarity with Microsoft GCC High / Azure Government environments and how CMMC controls apply in that context. Strong understanding of CUI/FCI scoping, data-flow considerations, and system boundary definition. Excellent written communication and ability to produce clear, assessment-ready artifacts inside the platform. Preferred CMMC Registered Practitioner (RP), Certified CMMC Professional (CCP), or equivalent demonstrated expertise. Experience supporting organizations of similar size (~10 users). U.S. person/citizen status preferred due to potential CUI handling. Deliverables Fully configured IntelliGRC instance with scoped assets, mapped controls, and imported documentation. Populated evidence structure, implementation statements, and POA&M tracking. Brief knowledge-transfer session / documentation for internal handover. Summary of remaining gaps or recommended next steps (if any).