Onsite CMMC & Cybersecurity Advisor

Eccalon, LLC; Detroit (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Eccalon, LLC seeks a Cybersecurity Advisor specializing in CMMC to lead client efforts toward achieving and maintaining compliance. You will advise on risk, governance, and security architecture across frameworks, including CMMC, ISO 27001, and NIST standards.

This role emphasizes continuous monitoring and policy development. The position involves collaboration with IT, security, and operations teams, development of POA&M plans, and conducting trainings and tabletop exercises for client staff.

Qualifications

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field.
• Certifications such as CISSP, CISM, CMMC-AB Certified Assessor, or equivalent.
• Extensive experience in cyber security, with a focus on compliance and regulatory standards.
• In-depth knowledge of the CMMC framework and its application in various organizational contexts.
• Strong project management skills, including the ability to manage multiple projects and deadlines.
• Excellent communication and interpersonal skills, with the ability to work effectively with technical and non-technical stakeholders.

Responsibilities

• Provide expert advice on a wide range of cybersecurity issues, including risk analysis, incident management, compliance, and security architecture.
• Develop and implement cybersecurity strategies tailored to the specific needs and risk profile of the organization.
• Lead client organization's CMMC certification process, from initial assessment to final certification and continuous monitoring.
• Develop and implement a CMMC compliance roadmap, including timelines, resource allocation, and key milestones.
• Lead compliance and security assessments with various cybersecurity frameworks and standards, including CMMC, ISO 27001, NIST 800-171, NIST CSF, ISO 9001, and FedRAMP.
• Act as the primary point of contact for all cyber compliance-related matters, liaising with senior management, external auditors, and other relevant parties.
• Collaborate with IT, security, and operational teams to implement necessary controls and measures to achieve the required compliance with frameworks and policies, including CMMC.
• Conduct comprehensive gap analyses to identify deficiencies in current security practices relative to applicable cybersecurity requirements.
• Develop and manage Plan of Action and Milestones (POA&Ms) to address identified gaps, ensuring timely and effective implementation of corrective actions.
• Create and maintain policies, procedures, and documentation required for security compliance, including System Security Plans (SSP).
• Work with Instructional System Design teams to create and deliver cybersecurity and awareness training to educate clients and employees on cybersecurity requirements, security policies, and best practices.
• Conduct tabletop exercises to ensure organizational readiness in the event of a security breach.
• Plan and conduct audits to evaluate the effectiveness of security controls and compliance.
• Prepare for and support external audits conducted by certified third-party assessors (e.g., C3PAOs).
• Implement continuous monitoring processes to ensure ongoing compliance with CMMC and other relevant security standards.

Skills

Communication skills

Project management

Analytical thinking

Team collaboration

Education

Bachelor's degree in Cyber Security/IT/CS

Master's degree in Cyber Security/IT/CS

CISSP

CISM

CMMC-AB Certified Assessor

Job description

Eccalon, LLC seeks a Cybersecurity Advisor specializing in CMMC to lead client efforts toward achieving and maintaining compliance. You will advise on risk, governance, and security architecture across frameworks, including CMMC, ISO 27001, and NIST standards.

This role emphasizes continuous monitoring and policy development. The position involves collaboration with IT, security, and operations teams, development of POA&M plans, and conducting trainings and tabletop exercises for client staff.