Senior CMMC Compliance Specialist (CCP)

COMSO Inc; Columbia (MD); On-site; USD 90,000 - 105,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

FSA

401K match

Parental Leave

Paid Time Off

Federal Holidays

Birthday Holiday

Sabbatical

Job summary

COMSO, Inc. is seeking a Senior Systems Administrator to join our team, working with our Managed Security Service Provider to support CMMC readiness and compliance for federal government stakeholders.

The ideal candidate has CCP certification, understanding of CMMC and NIST SP 800-171, and experience in cybersecurity policy development and audits. This on-site role offers competitive benefits within Maryland operations.

Qualifications

• Active CCP certification and working knowledge of the CMMC framework.
• Knowledge of NIST SP 800-171 and CUI protection requirements.
• Experience supporting cybersecurity compliance, risk management, audits, or security controls.
• Experience developing or reviewing cybersecurity policies and SSPs/POA&Ms.
• Ability to communicate cybersecurity requirements to technical and non-technical stakeholders.

Responsibilities

• Support CMMC readiness and compliance activities per current CMMC requirements.
• Review environments against CMMC Level 1/2 security requirements.
• Assist with evaluating NIST SP 800-171 controls for CUI protection.
• Conduct gap analyses and remediation planning.
• Develop and maintain SSPs, POA&Ms, policies, and supporting evidence.

Skills

CCP certification

CMMC framework knowledge

NIST SP 800-171 knowledge

Compliance documentation

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/IT/IS or related field

Relevant cybersecurity/compliance/government contracting experience

Tools

Microsoft 365

Azure

Job description

COMSO, Inc. is seeking a Senior Systems Administrator to join our team, working with our Managed Security Service Provider to support CMMC readiness and compliance for federal government stakeholders.

The ideal candidate has CCP certification, understanding of CMMC and NIST SP 800-171, and experience in cybersecurity policy development and audits. This on-site role offers competitive benefits within Maryland operations.