Senior Assessor (CMMC)
location_onCommonwealth Brewing Company, 10426, Main Street, Green Acres, Fairfax, Virginia, 22030, United States
Job Description
Senior Assessor (CMMC) | US Based
Company Overview
ControlCase is a global leader in certification, cybersecurity, and continuous compliance services. Headquartered in Fairfax, Virginia, the company operates offices across North America, Europe, Latin America, Asia-Pacific, and the Middle East. ControlCase helps organizations design and implement efficient, cost-effective information security and compliance programs for both on-premise and cloud environments. The company provides Compliance as a Service (CaaS) solutions to assist businesses in meeting regulatory requirements for standards including PCI DSS, HITRUST, SOC 2 Type II, ISO 27001, PCI PIN, PCI P2PE, PCI TSP, PA DSS, CSA STAR, HIPAA, GDPR, SWIFT, CMMC, and FedRAMP.
Role Summary
ControlCase is seeking an experienced Senior Assessor with at least five years of relevant professional experience to lead and execute CMMC audits. The ideal candidate will possess strong expertise in reviewing and testing controls, documenting audit artifacts and reports, and completing all necessary documentation for the successful submission of CMMC certification documents under the approved CMMC Assessment Process (CAP). This is a fully remote role based in the United States, with a preference for candidates located in Eastern or Central Time Zones. The position involves approximately 20% travel to client sites.
Key Responsibilities
- Lead and perform comprehensive CMMC audits, including the review and testing of all applicable controls.
- Prepare and document all required audit artifacts, documentation, and reports with accuracy.
- Complete all documentation required for submission to eMass and ensure the successful acceptance of CMMC certification documentation.
- Oversee and guide junior assessors assigned to audit and certification projects.
- Ensure all audit documentation and reports are completed thoroughly and on schedule.
- Maintain high-quality documentation and strict compliance with audit standards.
Required Qualifications
- Experience: 5+ years of relevant professional experience.
- Certifications: Active CCA or CCP certification AND active CISSP, CISA, CISM, or equivalent certification.
- Audit Background: Previous IT audit experience is required; CMMC audit experience is preferred.
- Technical Knowledge: Strong knowledge of security frameworks, including CMMC 2.0, NIST 800-171, and NIST 800-53 Rev 5.
- Cloud Security: Strong understanding of cloud security, including FedRAMP and cloud computing best practices.
- Education: Bachelor’s degree (BS/BA) or equivalent military experience.
- Citizenship: U.S. citizenship is required.
CMMC Audit Proficiency
- Proven ability to conduct full CMMC audits, including the review of required documentation such as the System Security Plan (SSP).
- Experience completing CMMC audit artifacts and preparing detailed audit reports.
Additional Requirements
- Strong written and verbal communication skills to prepare CMMC reports and communicate risks to client management and IT teams.
Compensation and Benefits
Salary
$120,000 – $150,000 annually
Employee Benefits
ControlCase supports employee success and well-being by offering strong benefits, opportunities for growth, and the chance to collaborate with a global cybersecurity and compliance team. Benefits include:
- Company-provided equipment, including computer and essential work tools.
- 401(k) retirement savings plan.
- Comprehensive health insurance coverage.
- Dental and vision insurance.
- 100% company-paid life insurance.
- Paid Time Off (PTO) and official holidays.
- Mileage and travel reimbursement for business travel.
- Cell phone and internet reimbursement.
- Employee Assistance Program (EAP) for counseling and personal support.
- Flexible Spending Account (FSA) for healthcare and dependent care expenses.
- Employee discount programs with partner vendors.
- Employee referral program.
Work Environment
This is a fully remote role that offers the flexibility to work from home. Employees collaborate with global teams through virtual meetings while managing their responsibilities and contributing to ControlCase’s cybersecurity and compliance initiatives.
Contact Information
Andrew Lauchengco
Talent Acquisition Lead
Mobile: 571-251-4435
Email: alauchengco@controlcase.com
Work location
Work model: Remote
Commonwealth Brewing Company, 10426, Main Street, Green Acres, Fairfax, Virginia, 22030, United States
Fairfax, Virginia
Key Responsibilities
- check_circleLead and perform comprehensive CMMC audits
- check_circleReview and test all applicable security controls
- check_circlePrepare and document required audit artifacts and reports
- check_circleComplete documentation for eMass submission and CMMC certification
- check_circleOversee and guide junior assessors on audit projects
- check_circleEnsure audit documentation is completed thoroughly and on time
- check_circleCommunicate risks to client management and IT teams
Requirements
- verified5+ years of relevant professional experience
- verifiedActive CCA or CCP certification
- verifiedActive CISSP, CISA, CISM, or equivalent certification
- verifiedPrevious IT audit experience
- verifiedStrong knowledge of CMMC 2.0, NIST 800-171, and NIST 800-53 Rev 5
- verifiedStrong understanding of cloud security, FedRAMP, and cloud computing best practices
- verifiedU.S. citizenship
- verifiedBachelor’s degree (BS/BA) or equivalent military experience
Benefits & Perks
Skills, education and keywords
Skills: cca, ccp, cissp, cisa, cism, cmmc, cmmc 2.0, nist 800-171, nist 800-53 rev 5, fedramp.
Education: Bachelor’s degree (BS/BA) or equivalent military experience.