Senior CMMC Compliance & Security Advisor

Eccalon, LLC; Detroit (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Eccalon, LLC seeks a Cybersecurity Advisor specializing in CMMC to lead client efforts toward certification and ongoing compliance. The role requires expert knowledge of IT, cyber risk, and frameworks such as CMMC, ISO 27001, NIST SP 800-171, and FedRAMP, with the ability to translate standards into practical controls.

You will work with technical and non-technical stakeholders, develop and execute a CMMC roadmap, conduct assessments and training, and prepare for audits.

Qualifications

• Bachelor's degree or higher in Cyber Security, IT, CS or related field.
• CMMC-AB Certified Assessor or equivalent certification preferred.
• Extensive cybersecurity experience with focus on compliance and regulatory standards.

Responsibilities

• Provide expert advice on risk analysis, incident management, compliance, and security architecture.
• Develop and implement cybersecurity strategies tailored to the organization.
• Lead the CMMC certification process from assessment to certification and monitoring.
• Develop/CMMC compliance roadmap with timelines, resources, and milestones.
• Lead assessments across frameworks including CMMC, ISO 27001, NIST 800-171, NIST CSF, ISO 9001, FedRAMP.
• Act as primary contact for cyber compliance with stakeholders and auditors.
• Create and maintain security policies and documentation (SSP, etc.).
• Deliver training and awareness programs, including tabletop exercises.

Skills

Cybersecurity

Regulatory compliance

Project management

Policy development

Risk analysis

Communication skills

CMMC knowledge

Education

Bachelor's degree in Cyber Security / IT / CS

Master's degree in Cyber Security / IT / CS

CMMC-AB Certification

CISSP/CISM certification

Job description

Eccalon, LLC seeks a Cybersecurity Advisor specializing in CMMC to lead client efforts toward certification and ongoing compliance. The role requires expert knowledge of IT, cyber risk, and frameworks such as CMMC, ISO 27001, NIST SP 800-171, and FedRAMP, with the ability to translate standards into practical controls.

You will work with technical and non-technical stakeholders, develop and execute a CMMC roadmap, conduct assessments and training, and prepare for audits.