CMMC Cybersecurity Advisor — Hybrid On-site

Paychex Inc.; Detroit (MI); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Eccalon is seeking a Cybersecurity Advisor (CA) specializing in CMMC to lead client efforts toward achieving and maintaining compliance with current and future standards. You will serve as a trusted cybersecurity resource for both technical and non-technical stakeholders, guiding on threats, technologies, and best practices.

The role emphasizes on-site leadership and strategic security planning, with responsibilities spanning framework implementation, risk management, and training across client

Qualifications

• Bachelor’s degree in Cyber Security, IT, CS or related field required.
• Relevant certifications such as CISSP, CISM, CMMC-AB Certified Assessor or equivalent.
• Extensive experience in cybersecurity with focus on compliance and regulatory standards.
• Deep knowledge of the CMMC framework and its applications.
• Strong project management and communication skills.

Responsibilities

• Provide expert advice on cybersecurity issues including risk analysis, incident management, compliance and security architecture.
• Lead client CMMC certification efforts from assessment to final certification and continuous monitoring.
• Develop and implement CMMC compliance roadmaps with timelines and milestones.
• Perform gap analyses and manage POA&Ms to address deficiencies.
• Create and maintain security policies and documentation (SSP).
• Deliver cybersecurity training and awareness programs; conduct tabletop exercises.
• Support audits by third-party assessors and prepare for external reviews.
• Monitor and improve security controls to stay aligned with frameworks and standards.

Skills

Cybersecurity

CMMC

Regulatory standards

Project management

Security policies

Communication

Threat analysis

Education

Bachelor's degree in Cyber Security/IT/CS

Master’s degree in Cyber Security

Job description

Eccalon is seeking a Cybersecurity Advisor (CA) specializing in CMMC to lead client efforts toward achieving and maintaining compliance with current and future standards. You will serve as a trusted cybersecurity resource for both technical and non-technical stakeholders, guiding on threats, technologies, and best practices.

The role emphasizes on-site leadership and strategic security planning, with responsibilities spanning framework implementation, risk management, and training across client