📢 WE'RE HIRING: CMMC LEVEL 2 COMPLIANCE SPECIALIST / CONSULTANT

Compensation: To be discussed based on experience and scope of engagement

Engagement Type: Project-Based / Contract / Other Arrangement to Be Discussed

Location: Remote

Client: U.S.-Based Company

📌 About the Company

We are a U.S.-based commercial flooring contractor that provides end-to-end flooring solutions for corporate, healthcare, education, and government projects. The company manages the full project lifecycle—from planning and material sourcing to installation—ensuring high-quality results delivered on time and within budget.

The company is looking for an experienced professional who can assess its current cybersecurity practices against the Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements and help determine the steps needed to meet the applicable standards.

📌 Role Summary

The CMMC Level 2 Compliance Specialist / Consultant will help the company evaluate its existing cybersecurity controls, complete the required Level 2 self-assessment, document assessment findings, and identify gaps that need to be addressed. This role requires practical experience with CMMC Level 2 and NIST SP 800-171 requirements, assessment scoring, compliance documentation, and cybersecurity gap analysis. The ideal candidate can work independently, communicate findings clearly, and help the company move toward compliance as efficiently as possible.

🔸Key Responsibilities

• Review CMMC Level 2 requirements and assess the company's existing cybersecurity practices and controls.
• Conduct or support the CMMC Level 2 self-assessment, including evaluating applicable security requirements and completing assessment scoring.
• Gather and review supporting evidence to determine whether security requirements are being met.
• Identify compliance gaps, assess areas requiring improvement, and recommend appropriate corrective actions.
• Document assessment results, findings, and supporting evidence in accordance with applicable requirements.
• Advise on cybersecurity policies, procedures, access controls, and technical safeguards needed to address identified gaps.
• Coordinate with the company's existing IT provider or other relevant stakeholders to understand the current environment and implement necessary improvements, as agreed.
• Provide clear guidance on outstanding requirements, remediation priorities, and recommended next steps toward compliance.
• Explain the assessment results and recommendations in a clear, practical manner to company leadership.

🔸Requirements

• Experience: Demonstrated hands-on experience with CMMC Level 2 self-assessments, CMMC compliance, or implementation of the relevant security requirements.
• Technical Knowledge: Strong understanding of NIST SP 800-171 and the cybersecurity controls applicable to CMMC Level 2.
• Assessment & Documentation: Experience evaluating security controls, reviewing supporting evidence, completing assessment scoring, documenting findings, and identifying compliance gaps.
• Remediation: Ability to recommend practical corrective actions and advise organizations on addressing cybersecurity compliance deficiencies.
• Cybersecurity Background: Working knowledge of IT security controls, access management, system security, and related cybersecurity practices.
• Independence: Ability to manage the assessment process with minimal supervision and communicate progress, risks, and outstanding requirements.
• Communication: Strong written and verbal English communication skills, with the ability to explain technical compliance matters clearly.

🔸Preferred Qualifications

• Experience supporting U.S. Department of Defense contractors or subcontractors with CMMC compliance.
• Experience preparing organizations for formal CMMC Level 2 third-party assessments.
• Relevant cybersecurity, information security, or CMMC professional credentials, where applicable.

🔸Engagement Details

• Scope: CMMC Level 2 self-assessment and compliance gap evaluation, with remediation guidance as needed.
• Timeline: Immediate availability preferred due to an urgent government contract requirement.
• Engagement Type: Flexible; project-based consulting or another suitable arrangement will be discussed based on the candidate's experience and the client's needs.
• Compensation: To be discussed based on qualifications, proposed scope, timeline, and engagement structure.