CMMC Assessment Lead

Paragone Solutions, Inc.; Virginia; Remote; USD 90,000 - 150,000; Full time

Job summary

SecureITSM is seeking a highly organized CMMC Assessment Lead to oversee planning, preparation, coordination, and support of customer CMMC assessments conducted by authorized C3PAOs. This role ensures artifacts, policies, and evidence are complete and defensible.

The ideal candidate combines cybersecurity and compliance expertise with project management and customer communication. Remote position with occasional travel to support customer assessments and executive reporting.

Qualifications

• Experience leading CMMC assessments and containment of artifacts.
• Knowledge of NIST SP 800-171 Rev. 2/3 requirements and mappings.
• Strong communication with customers, assessors, and leadership.
• Ability to coordinate ROE, logistics, and evidence transfer.

Responsibilities

• Plan and coordinate customer CMMC assessments with stakeholders.
• Prepare and validate evidence packages and POA&Ms.
• Defend implementations and artifacts during assessments.
• Coordinate readiness reviews, ROE, and assessment logistics.
• Provide executive reporting on customer readiness and gaps.

Skills

CMMC expertise

Project management

Customer communication

Assessment defense

Education

Bachelor's degree in a related field

Job description

Job Description

About SecureITSM

SecureITSM is a Certified CMMC Managed Service Provider (MSP) supporting Department of Defense (DoD) contractors that must obtain and maintain Cybersecurity Maturity Model Certification (CMMC). SecureITSM is a CMMC Certified Organization (CMMC UID #L200002160) and has developed a proprietary CMMC documentation and compliance platform designed to streamline assessment preparation, evidence management, and ongoing compliance operations.

We are seeking a highly organized and technically skilled CMMC Assessment Lead to oversee the planning, preparation, coordination, and support of customer CMMC assessments conducted by authorized C3PAOs. This role is critical to ensuring our customers successfully achieve and maintain compliance with NIST SP 800-171 Rev. 2 and future Rev. 3 requirements.

The ideal candidate combines deep cybersecurity and compliance expertise with exceptional project management, customer communication, and assessment defense capabilities.

Location and Travel

This is a remote position with occasional travel required to support customer assessments.

Position Summary

The CMMC Assessment Manager will oversee customer assessment readiness activities from initial scheduling through final assessment support and remediation coordination. The role requires direct interaction with customers, assessors, internal engineering teams, and executive leadership.

This individual will manage multiple concurrent customer engagements while ensuring assessment artifacts, implementation statements, policies, procedures, and evidentiary documentation are accurate, complete, and defensible.

Key Responsibilities

Plan and Coordinate Assessments (Primary)

• Maintain the master CMMC customer assessment schedule
• Coordinate assessment timelines with customers, C3PAOs, and internal SecureITSM teams
• Conduct readiness reviews and pre-assessment planning meetings
• Track customer assessment milestones, dependencies, and remediation activities
• Manage customer communications related to assessment preparation and scheduling
• Coordinate Rules of Engagement (ROE), assessment logistics, and secure evidence transfer processes
• Monitor assessment status and provide executive-level reporting on customer readiness
• Assist customers in understanding assessment scope, boundary definitions, and enclave considerations

Prepare Assessment Packages (Primary)

• Update implementation statements as needed
• Gather and organize evidentiary artifacts
• Coordinate customer evidence collection activities
• Review SSPs, policies, procedures, and supporting documentation for assessment readiness
• Validate evidence traceability to NIST SP 800-171 requirements and assessment objectives
• Prepare assessor-ready evidence packages and artifact repositories
• Conduct internal quality assurance reviews of documentation and evidence
• Identify documentation gaps and coordinate remediation activities
• Support development and maintenance of Plans of Action & Milestones (POA&Ms)
• Ensure documentation aligns with evolving CMMC and NIST guidance

Support Customer Assessments (Primary)

• Attend and actively support customer assessments
• Actively defend implementations and evidence presented to assessors
• Coordinate assessment interviews and technical demonstrations
• Support mock assessments and readiness exercises for customers
• Assist customers in responding to assessor requests and follow-up questions
• Document assessment observations, findings, and remediation actions
• Coordinate post-assessment remediation activities and evidence resubmissions when required
• Serve as a trusted advisor throughout the certification lifecycle

Maintain SecureITSM’s Authorization and Compliance (Secondary)

• Conduct SecureITSM’s annual self-assessment activities
• Maintain internal compliance documentation and evidentiary artifacts
• Coordinate annual evidence collection activities (e.g., training certificates, access reviews, vulnerability scans)
• Assist with internal policy and procedure updates
• Support ongoing continuous monitoring and compliance validation activities
• Track changes to CMMC, NIST SP 800-171, and related DoD guidance affecting internal compliance posture

Implementation Statement Management (Secondary)

• M