Certified CMMC Professional

DigiFlight, Inc.; Columbia (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

DigiFlight, Inc. in Columbia, MD, is seeking a Certified CMMC Professional to support readiness engagements and formal assessments, ensuring alignment with the CMMC Assessment Process (CAP) and CMMC requirements.

The role includes performing gap assessments against CMMC and NIST SP 800-171, developing SSPs and POA&Ms, and helping implement evidence collection and policy refinement. Strong written and verbal communication are essential.

Qualifications

• 3–5 years of cybersecurity/IT audit/GRC experience.
• Experience with CMMC Level 1 & 2 and CAP processes.
• Familiarity with NIST SP 800-171 controls.
• Knowledge of DoD contractor environments and CUI handling.

Responsibilities

• Support CMMC readiness engagements and formal assessments.
• Evaluate cybersecurity practices against CMMC requirements.
• Assist in SSP/POA&Ms development and evidence collection.
• Identify and remediate control deficiencies prior to assessment.

Skills

Security assessments

Compliance frameworks

DoD environment familiarity

Analytical thinking

Written communication

Verbal communication

Advisory and assessment roles

Job description

Certified CMMC Professional

Columbia, MD, Columbia, MD, US

Duties and Responsibilities

The Certified CMMC Professional (CCP) supports bothCMMC readiness engagements and formal assessment activitiesby evaluating an organization’s cybersecurity practices against CMMC requirements. This role contributes tocontrol implementation validation, documentation analysis, and assessment execution, while ensuring alignment with the CMMC Assessment Process (CAP).

Readiness & Advisory Support

• Support organizationsin preparing for CMMC Level 1 and Level 2 certification
• Perform gap assessments against:
• CMMC requirements
• NIST SP 800-171 controls
• Assistin the development and refinement of:
• System Security Plans (SSPs)
• POA&Ms
• Policies and procedures
• Helpidentifyand remediate control deficiencies prior to formal assessment
• Evidence requirements
• Certification boundary considerations

3–5 yearsof experience in:

• Cybersecurity
• IT audit or compliance
• Governance, Risk, and Compliance (GRC)
• Information systems or IT operations

Working knowledge of:

• CMMC Level 1 and Level 2 requirements
• NIST SP 800-171
• CMMC Assessment Process (CAP)
• FedRAMP
• SOC 2

Required Skills

• Experience supporting:
• Security assessments or audits
• Compliance frameworks (e.g., FedRAMP, SOC 2, ISO 27001)
• Familiarity with DoD contractor environments and Controlled Unclassified Information (CUI)
• Analytical thinking and attention to detail
• Ability to interpret control requirements and supporting evidence
• Strong written and verbal communication skills
• Ability tooperatein both advisory and assessment roles with discipline

Considerations

• Must avoid conflicts of interestin accordance withapplicable CMMC ecosystem expectations