Lead Certified CMMC Assessor (LCCA) (0001)

OCT Consulting LLC; McLean (VA); Remote; USD 55,000 - 83,000; Full time

Job summary

OCT Consulting LLC is seeking a Lead Certified CMMC Assessor to drive CMMC Level 2 certification assessments for our Federal government-focused clients. The role leads the assessment team, coordinates scoping, evidence collection, and final determinations, and serves as the main OSC liaison.

The candidate will mentor CCAs and CCPs, ensuring compliance with Cyber AB and ISO/IEC standards, and travel to client sites as needed. U.S. citizenship and 7+ years of cybersecurity experience are expected.

Qualifications

• Must be a U.S. Citizen. U.S. citizenship is mandatory for this role because all personnel participating in the CMMC Level 2 certification assessment process must complete a Tier 3 background investigation resulting in a determination of national security eligibility
• Active Certified CMMC Assessor (CCA) certification in good standing, with Lead Assessor designation or the demonstrated experience required to be authorized as a Lead Assessor
• Bachelor’s degree in cybersecurity, information technology, information systems, or a related field, or equivalent professional experience
• Typically 7 years of cybersecurity or information assurance experience, including hands-on NIST SP 800-171 / CMMC work, with at least 3 years leading assessments or audits
• In-depth knowledge of NIST SP 800-171 Rev 2, NIST SP 800-171A, 32 CFR Part 170, and DFARS 252.204-7012
• Professional certifications such as CISSP, CISA, CCP, or equivalent strongly preferred
• Strong leadership, assessment report writing, and client-facing communication skills
• Location / on-site: Remote-eligible with availability to travel to client sites for on-site assessment activities as required

Responsibilities

• Serve as the Lead Assessor on CMMC Level 2 certification assessments, directing the assessment team and owning the overall assessment plan, schedule, and execution
• Lead scoping, pre-assessment readiness reviews, and finalization of the assessment plan with the Organization Seeking Certification (OSC)
• Direct evidence collection and validation across all 110 NIST SP 800-171 Rev 2 security requirements using the examine, interview, and test methods defined in NIST SP 800-171A
• Make and defend final determinations (MET / NOT MET / NOT APPLICABLE) for each requirement and oversee scoring and results
• Assign and supervise the work of Certified CMMC Assessors (CCAs) and supporting personnel, ensuring consistent application of CMMC assessment methodology
• Author and review the final assessment report and the Certificate of CMMC Status recommendation, and manage Plan of Action and Milestones (POA&M) closeout assessments within the 180-day window
• Serve as the primary point of contact with the OSC and coordinate with the C3PAO quality assurance function throughout the engagement
• Ensure all assessment activities comply with the Cyber AB Code of Professional Conduct, conflict-of-interest, ethics, and impartiality requirements, and with ISO/IEC 17020:2012 procedures
• Mentor and develop CCAs and Certified CMMC Professionals (CCPs) and contribute to continuous improvement of assessment practices

Skills

Leadership

Client-facing communication

Mentorship

Assessment report writing

Project management

Team coordination

Education

Bachelor's degree in cybersecurity/IT

Job description

Lead Certified CMMC Assessor (LCCA)

OCT Consulting is a business management and technology consulting firm that supports Federal Government clients. We provide consulting services in the areas of Strategy, Process Improvement, Change Management, Program and Project Management, Acquisition/Procurement, and Information Technology.

Responsibilities And Duties

OCT currently has an opening for a Lead Certified CMMC Assessor (LCCA) to support the build-out of OCT’s CMMC Certified Third-Party Assessment Organization (C3PAO) practice. This position serves as the senior assessor responsible for leading CMMC Level 2 certification assessments end to end.

Day to day responsibilities include:

• Serve as the Lead Assessor on CMMC Level 2 certification assessments, directing the assessment team and owning the overall assessment plan, schedule, and execution
• Lead scoping, pre-assessment readiness reviews, and finalization of the assessment plan with the Organization Seeking Certification (OSC)
• Direct evidence collection and validation across all 110 NIST SP 800-171 Rev 2 security requirements using the examine, interview, and test methods defined in NIST SP 800-171A
• Make and defend final determinations (MET / NOT MET / NOT APPLICABLE) for each requirement and oversee scoring and results
• Assign and supervise the work of Certified CMMC Assessors (CCAs) and supporting personnel, ensuring consistent application of CMMC assessment methodology
• Author and review the final assessment report and the Certificate of CMMC Status recommendation, and manage Plan of Action and Milestones (POA&M) closeout assessments within the 180-day window
• Serve as the primary point of contact with the OSC and coordinate with the C3PAO quality assurance function throughout the engagement
• Ensure all assessment activities comply with the Cyber AB Code of Professional Conduct, conflict-of-interest, ethics, and impartiality requirements, and with ISO/IEC 17020:2012 procedures
• Mentor and develop CCAs and Certified CMMC Professionals (CCPs) and contribute to continuous improvement of assessment practices

Requirements

• Must be a U.S. Citizen. U.S. citizenship is mandatory for this role because all personnel participating in the CMMC Level 2 certification assessment process must complete a Tier 3 background investigation resulting in a determination of national security eligibility
• Active Certified CMMC Assessor (CCA) certification in good standing, with Lead Assessor designation or the demonstrated experience required to be authorized as a Lead Assessor
• Must be able to obtain and maintain a favorable Tier 3 background investigation resulting in a national security eligibility determination (this is not a security clearance and is not for the purpose of government employment). The investigation will involve a credit, fingerprint, and law enforcement agency check
• Bachelor’s degree in cybersecurity, information technology, information systems, or a related field, or equivalent professional experience
• Typically 7 years of cybersecurity or information assurance experience, including hands-on NIST SP 800-171 / CMMC work, with at least 3 years leading assessments or audits
• In-depth knowledge of NIST SP 800-171 Rev 2, NIST SP 800-171A, 32 CFR Part 170, and DFARS 252.204-7012
• Professional certifications such as CISSP, CISA, CCP, or equivalent strongly preferred
• Strong leadership, assessment report writing, and client-facing communication skills
• Location / on-site: Remote-eligible with availability to travel to client sites for on-site assessment activities as required

Salary Range: $40- $60 hourly commensurate with experience, education, etc. This role may be available as either a part-time or full-time opportunity.

Benefits

About OCT Consulting

OCT Consulting LLC is a Small Business (SB) providing professional services and information technology solutions to the Federal government and commercial clients. Founded in 2013, we bring the agility of operations and a management team with a track record of leading successful engagements at major Federal government agencies.

At OCT we believe in creating a work environment where employees can thrive based on their abilities, skills, and achievements. We are dedicated to providing career growth and professional development based on individual merit and fostering a workplace where everyone’s contributions are valued and recognized.