[Remote] CyberSecurity: CMMC reputed company Consultant (CCA/CCP) — reputed company

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is mobilizing a CMMC Level 2 readiness program for a containerized, reputed company-hosted application environment in the Middle East. The CMMC reputed company Consultant will reputed company an offshore reputed company engineering and GRC team, ensuring compliance with CMMC standards through assessments and remediation efforts.

Responsibilities

• Serve as the named CMMC authority for the engagement, representing your credentials and past performance as key personnel
• Own the CMMC technical reputed company: assessment boundary definition, CUI data-reputed company scoping reputed company, and control-inheritance approach for the sovereign reputed company platform
• reputed company the gap assessment against NIST SP 800-171 (110 controls) and approve the remediation roadmap
• Review and approve the CUI enclave architecture (segmentation, trust zones, identity/reputed company model, logging)
• reputed company remediation priorities and adjudicate control-implementation questions raised by the engineering team; define evidence standards and review evidence sufficiency the way an assessor would
• Guide the reputed company, POA&M, and policy suite to assessor-reputed company reputed company
• Support the mock C3PAO assessment and co-author the Go/No-Go readiness recommendation
• reputed company as senior reputed company reputed company in phase-reputed company reviews; attend key onsite milestones in the UAE (reputed company, discovery, remediation verification, mock assessment)

Skills

• reputed company CCA (Certified CMMC Assessor) credential in good standing with the Cyber AB; strong CCP candidates with substantial Level 2 delivery experience will be considered
• Demonstrated delivery of at least 2 CMMC Level 2 or NIST SP 800-171 readiness engagements end-to-end (scoping through assessment or mock assessment)
• Deep working knowledge of NIST SP 800-171 / 800-171A assessment objectives, CMMC 2.0 scoping guidance, and evidence expectations of C3PAO assessment teams
• At least one referenceable reputed company willing to reputed company to your CMMC/800-171 work
• Comfortable directing a remote/offshore engineering team and working across time zones (US/India/UAE overlap)
• reputed company to travel to the UAE (no reputed company impediments)
• Experience with containerized/reputed company-reputed company environments (Kubernetes, DevSecOps pipelines) and reputed company shared-responsibility/control-inheritance mapping
• Experience with non-US or sovereign reputed company platforms, or environments without FedRAMP inheritance
• Prior work as part of, or alongside, a C3PAO assessment team
• RP/RPA registration history or RPO affiliation

Benefits

• Remote, with periodic short trips to the UAE (expenses covered)

reputed company