Certified CMMC Assessor (CCA)

OCT Consulting is a leading business management and technology consulting firm dedicated to supporting Federal Government clients. We specialize in Strategy, Process Improvement, Change Management, Program and Project Management, Acquisition/Procurement, and Information Technology services.

Responsibilities and Duties

OCT is seeking a Certified CMMC Assessor (CCA) to support the development of our CMMC Certified Third-Party Assessment Organization (C3PAO) practice. In this role, you will conduct CMMC Level 2 certification assessment activities as a key member of the assessment team, working under the guidance of the Lead Certified CMMC Assessor.

Day-to-day responsibilities include:

• Conduct CMMC Level 2 certification assessment activities as part of the assessment team, reporting to the Lead Assessor (LCCA).
• Examine documentation and artifacts, interview personnel, and test security controls across all 110 NIST SP 800-171 Rev 2 requirements using NIST SP 800-171A methodologies.
• Document findings and provide reasoned MET / NOT MET / NOT APPLICABLE determinations for assigned requirements, supported by evidence.
• Assist in the development of the assessment plan, scope validation, and pre-assessment readiness reviews.
• Contribute to the final assessment report and support Plan of Action & Milestones (POA&M) closeout activities within required timeframes.
• Maintain assessment evidence and working papers in accordance with C3PAO procedures and ISO/IEC 17020:2012 standards.
• Adhere strictly to the Cyber AB Code of Professional Conduct, conflict-of-interest, ethics, and impartiality requirements.

Requirements

• U.S. Citizenship: Mandatory, as all personnel involved in CMMC Level 2 assessments must complete a Tier 3 background investigation for national security eligibility.
• Certification: Active Certified CMMC Assessor (CCA) certification in good standing.
• Background Investigation: Ability to obtain and maintain a favorable Tier 3 background investigation (includes credit, fingerprint, and law enforcement checks). This is not a security clearance for government employment.
• Education/Experience: Bachelor's degree in cybersecurity, information technology, information systems, or a related field, OR equivalent professional experience.
• Experience: Typically 4+ years of cybersecurity or information assurance experience, with demonstrated exposure to NIST SP 800-171 / CMMC.
• Knowledge: Working knowledge of NIST SP 800-171 Rev 2, NIST SP 800-171A, 32 CFR Part 170, and DFARS 252.204-7012.
• Preferred Certifications: CompTIA Security+, CISSP, CISA, or CCP are advantageous.
• Skills: Strong documentation, analytical, and communication skills.
• Location: Remote-eligible, with the requirement to travel to client sites for on-site assessment activities as needed.

Salary

$35 - $50 hourly, commensurate with experience, education, and other qualifications. This role may be offered as either a part-time or full-time opportunity.

About OCT Consulting

OCT Consulting LLC is a Small Business (SB) providing professional services and information technology solutions to federal government and commercial clients. Founded in 2013, we combine agile operations with a management team that has a proven track record of leading successful engagements at major federal agencies.

At OCT, we foster a work environment where employees can thrive based on their abilities, skills, and achievements. We are committed to providing career growth and professional development based on individual merit, cultivating a workplace where everyone's contributions are valued and recognized.

Please mention the word SALUTE and tag RMjAuMTYzLjYuODE= when applying to show you read the job post completely (#RMjAuMTYzLjYuODE=). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.