AssessmentConsultant,CMMC

The Dedicated Assessment Consultant plays a lead role representing clients in C3’s Cybersecurity Maturity Model Certification (CMMC) Assessment program. This role works collaboratively with client stakeholders including business leaders and internal IT, as well as C3’s professional services and managed services teams and third-party service providers. The primary purpose of this role is to project manage client assessments and to represent and defend C3’s reference architecture and compliance implementation on behalf of the client during Certified Third-Party Assessment Organization (C3PAO) Pre-Assessments and Assessments. What You'll Do Review and prepare client documentation to ensure successful pre-assessments and assessments. Conduct gap analyses to identify areas of non-compliance and develop remediation plans Project manage client assessments by contacting, organizing, and facilitating stakeholders and interested parties before, during, and after assessments. Validate system scope (technology, people, business processes) for compliance Perform QA/QC and validate artifacts and evidence and ensure client success prior to assessment Manage, validate, and defend System Security Plan(s), policies, and procedures in CMMC assessments Manage customer expectations, internal and external resources, and relevant third parties to ensure engagements are successful Facilitate post-assessment debriefings with clients to review findings and next steps Provide ongoing advisory to clients on issues related to security and compliance Provide expert guidance on interpreting compliance requirements and translating them into actionable steps for clients Develop and maintain subject matter expertise in the laws, regulations, and government-wide policies that govern cybersecurity data protection for the U. S. Defense Industrial Base, including: DFARS (NIST SP 800-171, FedRAMP equivalency) CMMC (Levels 1 CCA is preferred Technical understanding and experience leveraging Microsoft clou