CMMC Level 2 Certified Assessor

Velero; United States; Remote; USD 103,000 - 172,000; Part time

Benefits offered by this job

Flexible project-based engagements

Job summary

Velero is seeking a highly skilled CMMC Level 2 Certified Assessor (CCA) to join on a project basis. The ideal candidate will conduct official Level 2 assessments for clients seeking certification, evaluate security controls, and prepare detailed audit reports in alignment with CMMC-AB standards.

You will collaborate with a C3PAO to ensure accreditation requirements are met, stay current with CMMC standards, and guide organizations through the assessment process, delivering remediation plans and

Qualifications

• Minimum 5 years of experience in information security auditing with focus on NIST SP 800-171 compliance.
• Proven experience conducting formal compliance audits and security assessments.
• Familiarity with CMMC Assessment Process and documentation requirements.
• Strong knowledge of information security principles, risk management, and audit methodologies.
• Excellent written and verbal communication with ability to produce high-quality assessment reports.

Responsibilities

• Perform official CMMC Level 2 assessments for organizations seeking certification.
• Evaluate effectiveness of security controls, policies, and procedures, identifying compliance gaps.
• Prepare comprehensive audit reports with findings, recommendations, and remediation plans following CMMC-AB standards.
• Collaborate with a C3PAO to ensure assessments meet accreditation requirements.
• Guide organizations through the formal CMMC assessment process for readiness and certification criteria.
• Stay updated on CMMC requirements, standards, and best practices changes.

Skills

CMMC Level 2

NIST SP 800-171

Information security auditing

Compliance reporting

Audit methodologies

Communication skills

Job description

We’re Hiring!* Hold a (CCA) Certification is mandatory*

We seek a highly skilled CMMC Level 2 Certified Assessor (CCA) to join our team on a project basis. The ideal candidate will have a proven track record in information security, compliance, and auditing, with expertise in NIST 800-171 standards and the CMMC Assessment Process. This role involves conducting official CMMC Level 2 assessments for organizations seeking certification, preparing detailed audit reports, and ensuring alignment with the standards set by the CMMC Accreditation Body (CMMC-AB).

Key Responsibilities

• Perform official CMMC Level 2 assessments for organizations seeking certification.
• Evaluate the effectiveness of security controls, policies, and procedures, identifying compliance gaps.
• Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards.
• Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ensure assessments meet accreditation requirements.
• Guide organizations through the formal CMMC assessment process, ensuring readiness and compliance with certification criteria.
• Stay updated on CMMC requirements, standards, and best practices changes.

Qualifications, Skills & Certifications

• Minimum of 5 years of experience in information security auditing, with a strong focus on NIST SP 800-171 compliance.
• Proven experience conducting formal compliance audits and security assessments.
• Familiarity with the Cybersecurity Maturity Model Certification (CMMC) Assessment Process and documentation requirements.
• Strong knowledge of NIST SP 800-171 standards, security controls, and compliance requirements.
• Deep understanding of information security principles, risk management, and audit methodologies.
• Excellent written and verbal communication skills, with the ability to create detailed, high-quality assessment reports.

Required Certification

• CMMC Certified Assessor (CCA) certification.
• Candidates must currently hold, have previously held, or be willing to obtain the certification under client sponsorship.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Authorization Professional (CAP)

Flexible, project-based engagements with the opportunity to work on high-impact cybersecurity compliance initiatives.

Competitive hourly compensation based on experience, certifications, and project scope.

Opportunity to work on 80+ hour engagements with established clients across regulated industries.