Senior Associate, CMMC

About the role

Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. Our professional services focus on security and privacy audits, assessments, and certifications. Schellman has become one of the largest cybersecurity assessment firms in the United States without providing any traditional accounting services. We are an accredited multi-framework ISO Certification Body for security, privacy, business continuity, and quality; a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3PAO and the first assessment firm authorized as a CMMC C3PAO. Our specialty and expertise remain in providing best in class Cybersecurity and IT Audits and Attestations. Our culture, approach with clients, and dedication to our values has led us to consistently be a Great Places to Work certified company and rated as a Best Firms to Work For by Accounting Today and a Glassdoor Best Places to Work. We deeply appreciate our employees, as shown by our first core value – People Come First. This is demonstrated in our culture, benefits, and how we handle business.

Responsibilities

• Interviewing client Subject Matter Experts for different fields of the organization, including technical areas as well as Human Resources, SecDevOps, SOC/NOC, and Internal Compliance;
• Performing walkthroughs of client on-premise, cloud, and hybrid architectures;
• Reviewing system security and technical configurations as they pertain to NIST 800-171 control requirements and CMMC scoping considerations;
• Analyzing technical documentation such as system security plans (SSPs), policies, procedures, and evidence artifacts;
• Documenting assessment findings, developing scoring rationales, and drafting formal deliverables;
• Maintaining awareness of evolving DoD and CMMC program requirements, including updates to the CAP, scoping guides, and assessment guides to support Schellman methodology updates and client education.

Requirements

• Working knowledge of Schellman’s services, methodology, and relevant professional standards;
• Requisite knowledge of applicable technology and security domains;
• A high level of attention to detail and quality of work product;
• A client service-oriented mindset;
• Excellent time management, organizational, and verbal and written communication skills;
• The ability to work on-site or remotely as a valuable contributor to a collaborative team;
• The capability to simultaneously manage assigned tasks for multiple projects;
• Proficiency using Microsoft Word, Excel, and PowerPoint, as well as Schellman’s service delivery applications;
• A full understanding and application of ethics, independence and Schellman’s values;
• A bachelor's degree in accounting, finance, business management, technology, or other relevant subject area, or equivalent years of experience directly related to the duties and responsibilities specified;
• All 3 of the following certifications: CCP, CCA, and a favorable Tier 3 determination from DoD.

Skills

• Working knowledge of Schellman’s services, methodology, and relevant professional standards;
• Requisite knowledge of applicable technology and security domains;
• A high level of attention to detail and quality of work product;
• A client service-oriented mindset;
• Excellent time management, organizational, and verbal and written communication skills;
• The ability to work on-site or remotely as a valuable contributor to a collaborative team;
• The capability to simultaneously manage assigned tasks for multiple projects;
• Proficiency using Microsoft Word, Excel, and PowerPoint, as well as Schellman’s service delivery applications;
• A full understanding and application of ethics, independence and Schellman’s values;
• A bachelor's degree in accounting, finance, business management, technology, or other relevant subject area, or equivalent years of experience directly related to the duties and responsibilities specified;
• All 3 of the following certifications: CCP, CCA, and a favorable Tier 3 determination from DoD.

Benefits

• Connecting, collaborating and continuous education are also highly valued and therefore we require some travel annually for our Internal Service Delivery roles, which can include in-person training, team meet-ups, and strategy meetings.

Pay

Competitive compensation package including base salary, bonus, and benefits.

Schedule

Full-time position with flexible scheduling options.