Part-Time CMMC Compliance Consultant (CCP/CCA)

Testpros; Sterling (VA); Remote; USD 83,000 - 145,000; Part time

Job summary

TestPros seeks an experienced CMMC Consultant to support DoD contracts across Levels 1–3 with an eye toward Level 4. This part-time consulting role focuses on readiness assessments, roadmaps, and ongoing compliance across NIST SP 800-171/800-172 requirements, including CUI governance and supply chain oversight.

The position is ideal for a subject matter expert available for future projects in late 2026 or 2027, offering flexible, part-time engagement and strong DoD cybersecurity expertise.

Qualifications

• Over 5 years of experience in cybersecurity consulting, specializing in DoD contracts, compliance frameworks (e.g., NIST SP 800-171), and CMMC implementation.
• Certified CMMC Professional (CCP).
• Certified CMMC Assessor (CCA).
• Certified DOD CMMC assessor.
• Expertise in setting up an authorized CMMC Third Party Assessment Organization (C3PAO).
• Proficient with new CMMC 2.0 requirements and DoD regulations.

Responsibilities

• Assess Organizational Readiness for CMMC 2.0 levels (Foundational, Advanced, Expert).
• Provide guidance on steps to achieve and maintain Levels 1–4.
• Develop a roadmap for CMMC compliance, including NIST SP 800-171/800-172 requirements, and handling FCI/CUI security.
• Assist prime contractors in overseeing subcontractors for CMMC requirements.
• Guide continuous compliance, incident reporting (72-hour) and annual affirmations.
• Conduct training sessions on CMMC requirements and controls.

Skills

CCP

CCA

DOD CMMC assessor

C3PAO

NIST SP 800-171

Tools

eMASS

ACAS

Job description

TestPros seeks an experienced CMMC Consultant to support DoD contracts across Levels 1–3 with an eye toward Level 4. This part-time consulting role focuses on readiness assessments, roadmaps, and ongoing compliance across NIST SP 800-171/800-172 requirements, including CUI governance and supply chain oversight.

The position is ideal for a subject matter expert available for future projects in late 2026 or 2027, offering flexible, part-time engagement and strong DoD cybersecurity expertise.