Senior CMMC Compliance Administrator (CCP)

COMSO, Inc.; Columbia, Northern (MD, KY); Hybrid; USD 90,000 - 105,000; Full time

Benefits offered by this job

Medical deductible w/ low premiums

Dental

Vision

Flexible Spending Account (FSA)

Disability (short & long-term)

401K match (6%)

Parental Leave

Paid Time Off

Federal Holidays (11)

Birthday Holiday

Sabbatical every 5 years

Emergency Facility Closure Days

Job summary

COMSO, Inc. is seeking a Senior Systems Administrator to join our team, working with our Managed Security Service Provider to ensure CMMC compliance and robust information security across environments.

The role emphasizes readiness assessments, documentation, and collaboration with technical and business stakeholders to protect CUI and FCI. Maryland-based, with MSP collaboration and a focus on DoD cybersecurity standards.

Qualifications

• Active CCP certification and strong CMMC familiarity.
• Knowledge of NIST SP 800-171 and CUI/FCI handling.
• Experience with cybersecurity compliance, audits, and policy documentation.
• Ability to communicate complex requirements to technical and non-technical stakeholders.

Responsibilities

• Support CMMC readiness and compliance per current requirements.
• Review environments against CMMC Level 1 and 2 controls.
• Assist with NIST SP 800-171 security requirements implementation.
• Conduct gap analyses and remediation tracking.
• Develop and maintain SSPs, POA&Ms, policies, and evidence.
• Coordinate with teams and assessment bodies for CMMC readiness.
• Stay updated on CMMC/NIST changes and DoD cybersecurity needs.
• Support internal audits and policy updates.

Skills

CCP certification

CMMC knowledge

NIST SP 800-171

Cybersecurity policies

Documentation & mapping

Education

Bachelors in Cybersecurity / IT

Tools

Microsoft 365/Azure

Job description

COMSO, Inc. is seeking a Senior Systems Administrator to join our team, working with our Managed Security Service Provider to ensure CMMC compliance and robust information security across environments.

The role emphasizes readiness assessments, documentation, and collaboration with technical and business stakeholders to protect CUI and FCI. Maryland-based, with MSP collaboration and a focus on DoD cybersecurity standards.