PDG Standard Template

About the role

We are seeking an experienced CMMC Level 1 Cybersecurity Compliance Consultant to support a CMMC Level 1 compliance initiative from initial assessment through project completion. The consultant will serve as a CMMC subject matter expert and work closely with project, IT, security, and business stakeholders to assess the organization's current compliance posture, develop a remediation strategy, support implementation activities, and prepare the organization for completion of its CMMC Level 1 self-assessment.

Responsibilities

• Serve as a CMMC subject matter expert throughout the CMMC Level 1 project lifecycle.
• Assess the current environment against applicable CMMC Level 1 requirements and identify technical, procedural, and documentation gaps.
• Develop a prioritized remediation plan with recommended corrective actions, dependencies, ownership, and implementation priorities.
• Review the organization's handling of Federal Contract Information (FCI) and assist in validating the scope of the CMMC environment.
• Evaluate existing technical controls, policies, procedures, processes, and supporting evidence.
• Work with IT, security, business, and project stakeholders to provide guidance throughout remediation activities.
• Review completed remediation activities and supporting evidence to help validate closure of identified findings.
• Assist with the development and refinement of required CMMC documentation.
• Provide guidance on evidence collection and organization.
• Support final readiness activities and preparation for the CMMC Level 1 self-assessment.
• Provide ongoing CMMC guidance and recommendations throughout the engagement.

Qualifications

• Active CMMC Certified Professional (CCP) certification is required.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field is required.
• Demonstrated experience supporting CMMC compliance and readiness initiatives.
• Strong knowledge of CMMC Level 1 requirements and FAR 52.204-21 safeguarding requirements.
• Experience conducting cybersecurity compliance assessments and developing actionable remediation plans.
• Experience evaluating technical security controls, policies, procedures, and compliance documentation.
• Ability to translate cybersecurity and compliance requirements into clear, actionable recommendations.
• Ability to collaborate effectively with technical teams, business stakeholders, and project leadership.