CMMC Compliance Architect & Cyber Advisor

Eccalon, LLC

Hanover (MD)

On-site

USD 110,000 - 160,000

Full time

9 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Eccalon, LLC is seeking a Cybersecurity Advisor specializing in CMMC to guide client organizations toward and maintaining certification, balancing technical and non-technical stakeholder needs. The role requires a strong technical background in systems, networks, and cloud, plus expertise in compliance frameworks, risk management, and training delivery.

The Advisor will work with a team to develop courseware and lead audits.

Qualifications

Bachelor's degree in Cyber Security, IT, CS or related field.
Certifications such as CISSP, CISM, CMMC-AB Certified Assessor, or equivalent.
Extensive cybersecurity experience focused on compliance and regulatory standards.
In-depth knowledge of the CMMC framework and its application in various contexts.
Strong project management with ability to manage multiple projects and deadlines.
Excellent communication and interpersonal skills for cross-functional work.
Proficiency in developing and implementing security policies and procedures.
Analytical mindset with strong problem-solving abilities.

Responsibilities

Provide expert advice on cybersecurity issues, including risk analysis, incident management, compliance, and security architecture.
Develop and implement cybersecurity strategies tailored to the organization’s needs and risk profile.
Lead client organization’s CMMC certification process from assessment to certification and monitoring.
Develop and implement a CMMC compliance roadmap with timelines, resources, and milestones.
Lead compliance assessments across CMMC, ISO 27001, NIST 800-171, NIST CSF, ISO 9001, and FedRAMP.
Act as primary contact for cyber compliance, liaising with senior management, auditors, and other parties.
Create and maintain security policies and System Security Plans (SSP).
Deliver cybersecurity training and awareness programs for clients and employees.
Conduct tabletop exercises to ensure readiness and promote security culture.
Plan and support audits by certified third-party assessors (e.g., C3PAOs).
Implement continuous monitoring to maintain ongoing compliance.