TestPros
CMMC Certified Professionals - Part Time (1099 only)
Job Summary
The role involves providing expert guidance on achieving and maintaining CMMC (Cybersecurity Maturity Model Certification) compliance for clients, focusing on levels 1 through 3. Key responsibilities include assessing cybersecurity readiness, developing compliance roadmaps, and assisting with subcontractor oversight and incident reporting processes. The ideal candidate will have extensive experience in cybersecurity consulting, knowledge of federal cybersecurity standards, and relevant certifications such as CMMC Professional or Assessor. The position offers flexible hours, competitive benefits, and an opportunity to work with DoD cybersecurity regulations and frameworks.
Required Skills
Benefits
Job Description
Company Overview:
TestPros is a successful and growing business, established in 1988 to provide Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities include Program Management, Program Oversight, Process Audit, Intelligence Analysis, Cyber Security, NIST SP 800-171 / CMMC Consulting/Assessment/Compliance, Zero Trust, Resiliency, Computer Forensics, Software Supply Chain Assurance, Software Testing, Test Automation, Section 508 and WCAG Accessibility Assessment and Remediation, Localization Testing, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services. TestPros is an Equal Opportunity Employer.
We are seeking an experiencedCMMC (Cybersecurity Maturity Model Certification) Consultant to provide guidance and support to our team in achieving compliance with the latest CMMC 2.0 requirements. The consultant will work with our clients to help them navigate CMMC levels 1-3 and ensure continuous compliance with DoD cybersecurity regulations. This is a part-time, flexible position ideal for a subject matter expert with CMMC implementation experience.
Key Responsibilities:
- Assess Organizational Readiness: Evaluate current cybersecurity practices and gaps in relation to the three CMMC 2.0 levels (Foundational, Advanced, Expert).
- CMMC Certification Guidance: Provide expert advice on the steps required to achieve and maintain certifications for Levels 1, 2, 3 and 4. This includes guidance on self-assessments, third-party certifications, and government-led assessments.
- Compliance Strategy: Develop a comprehensive roadmap for achieving CMMC compliance, including identifying necessary controls and policies, implementing NIST SP 800-171/800-172 requirements, and addressing Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) security.
- Subcontractor Oversight: Assist prime contractors in ensuring that subcontractors meet CMMC certification requirements, implementing a robust supply chain compliance management system.
- Incident Reporting & Continuous Compliance: Provide guidance on establishing continuous monitoring and compliance processes, including the rapid reporting of security incidents (72-hour notification) and annual affirmations of compliance.
- Training & Awareness: Conduct training sessions for internal teams and contractors to understand the CMMC requirements and how to implement appropriate cybersecurity controls.
Qualifications:
Experience:
- Over 5 years of experience in cybersecurity consulting, specializing in DoD contracts, compliance frameworks (e.g., NIST SP 800-171), and CMMC implementation
- Certified CMMC Professional (CCP)
- Certified CMMC Assessor (CCA)
- Certified DOD CMMC assessor https://cyberab.org/CMMC-Ecosystem/Ecosystem-Roles/Assessing-and-Certification
- Proficient with new CMMC 2.0 requirements and knowledgeable about the Department of Defense's recently released final rule for the Cybersecurity Maturity Model Certification (CMMC) Program.
- Experience working with the Defense Industrial Base (DIB) and handling Controlled Unclassified Information (CUI).
- Prior experience developing Plans of Action and Milestones (POA&M) for cybersecurity compliance.
- Familiarity with the latest DFARS Clause 252.204-7021 requirements and the implications of the August 2024 CMMC 2.0 updates.
Technical Skills:
- Strong understanding of federal cybersecurity regulations such as DFARS and FISMA.
- Proficient in tools like eMASS and ACAS, with extensive knowledge of cybersecurity standards (NIST 800-171, NIST 800-172).
Communication:
- Excellent written and verbal communication skills, with the ability to translate complex compliance details into clear, actionable guidance for non-technical audiences.
Clearance:
- Active or recently active DoD security clearance (preferred but not required).
Compensation:
- Competitive hourly rate, based on experience.
- Flexible schedule with the possibility of extended contract work.
Benefits
TestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees.
TestPros, Inc. is an Equal Opportunity Employer.
EEO Statement
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, marital status, age, national origin, or protected veteran status.
TestPros
Since 1988, TestPros has provided leading IT compliance services to both government & commercial clients, ensuring regulatory adherence.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.