CMMC Assessment Lead
Paragone Solutions, Inc.
McLean, VA
About SecureITSM
SecureITSM is a Certified CMMC Managed Service Provider (MSP) supporting Department of Defense (DoD) contractors that must obtain and maintain Cybersecurity Maturity Model Certification (CMMC). SecureITSM is a CMMC Certified Organization (CMMC UID #L200002160) and has developed a proprietary CMMC documentation and compliance platform designed to streamline assessment preparation, evidence management, and ongoing compliance operations. We are seeking a highly organized and technically skilled CMMC Assessment Lead to oversee the planning, preparation, coordination, and support of customer CMMC assessments conducted by authorized C3PAOs. This role is critical to ensuring our customers successfully achieve and maintain compliance with NIST SP 800-171 Rev. 2 and future Rev. 3 requirements.
The ideal candidate combines deep cybersecurity and compliance expertise with exceptional project management, customer communication, and assessment defense capabilities. Location and Travel: This is a remote position with occasional travel required to support customer assessments. Position Summary
The CMMC Assessment Manager will oversee customer assessment readiness activities from initial scheduling through final assessment support and remediation coordination. The role requires direct interaction with customers, assessors, internal engineering teams, and executive leadership. This individual will manage multiple concurrent customer engagements while ensuring assessment artifacts, implementation statements, policies, procedures, and evidentiary documentation are accurate, complete, and defensible. Key Responsibilities
Plan and Coordinate Assessments (Primary)
SecureITSM is a Certified CMMC Managed Service Provider (MSP) supporting Department of Defense (DoD) contractors that must obtain and maintain Cybersecurity Maturity Model Certification (CMMC). SecureITSM is a CMMC Certified Organization (CMMC UID #L200002160) and has developed a proprietary CMMC documentation and compliance platform designed to streamline assessment preparation, evidence management, and ongoing compliance operations. We are seeking a highly organized and technically skilled CMMC Assessment Lead to oversee the planning, preparation, coordination, and support of customer CMMC assessments conducted by authorized C3PAOs. This role is critical to ensuring our customers successfully achieve and maintain compliance with NIST SP 800-171 Rev. 2 and future Rev. 3 requirements.
The ideal candidate combines deep cybersecurity and compliance expertise with exceptional project management, customer communication, and assessment defense capabilities. Location and Travel: This is a remote position with occasional travel required to support customer assessments. Position Summary
The CMMC Assessment Manager will oversee customer assessment readiness activities from initial scheduling through final assessment support and remediation coordination. The role requires direct interaction with customers, assessors, internal engineering teams, and executive leadership. This individual will manage multiple concurrent customer engagements while ensuring assessment artifacts, implementation statements, policies, procedures, and evidentiary documentation are accurate, complete, and defensible. Key Responsibilities
Plan and Coordinate Assessments (Primary)
- Maintain the master CMMC customer assessment schedule
- Coordinate assessment timelines with customers, C3PAOs, and internal SecureITSM teams
- Conduct readiness reviews and pre-assessment planning meetings
- Track customer assessment milestones, dependencies, and remediation activities
- Manage customer communications related to assessment preparation and scheduling
- Coordinate Rules of Engagement (ROE), assessment logistics, and secure evidence transfer processes
- Monitor assessment status and provide executive-level reporting on customer readiness
- Assist customers in understanding assessment scope, boundary definitions, and enclave considerations
- Update implementation statements as needed
- Gather and organize evidentiary artifacts
- Coordinate customer evidence collection activities
- Review SSPs, policies, procedures, and supporting documentation for assessment readiness
- Validate evidence traceability to NIST SP 800-171 requirements and assessment objectives
- Prepare assessor-ready evidence packages and artifact repositories
- Conduct internal quality assurance reviews of documentation and evidence
- Identify documentation gaps and coordinate remediation activities
- Support development and maintenance of Plans of Action & Milestones (POA&Ms)
- Ensure documentation aligns with evolving CMMC and NIST guidance
- Attend and actively support customer assessments
- Actively defend implementations and evidence presented to assessors
- Coordinate assessment interviews and technical demonstrations
- Support mock assessments and readiness exercises for customers
- Assist customers in responding to assessor requests and follow-up questions
- Document assessment observations, findings, and remediation actions
- Coordinate post-assessment remediation activities and evidence resubmissions when required
- Serve as a trusted advisor throughout the certification lifecycle
- Conduct SecureITSM’s annual self-assessment activities
- Maintain internal compliance documentation and evidentiary artifacts
- Coordinate annual evidence collection activities (e.g., training certificates, access reviews, vulnerability scans)
- Assist with internal policy and procedure updates
- Support ongoing continuous monitoring and compliance validation activities
- Track changes to CMMC, NIST SP 800-171, and related DoD guidance affecting internal compliance posture
- Maintain and update SecureITSM master implementation statement libraries aligned to NIST SP 800-171 and evolving CMMC guidance
- Develop and maintain industry-specific implementation statement sets (e.g., manufacturing, engineering, professional services, telework-only environments)
- Standardize implementation language and evidence expectations across customer environments
- Coordinate updates to implementation statements based on assessment findings, regulatory changes, and best practices
- Validate implementation statements for technical accuracy, completeness, and assessor defensibility
- Support continuous improvement of SecureITSM’s proprietary documentation platform and implementation content library
- Develop and maintain assessment preparation Standard Operating Procedures (SOPs)
- Continuously improve evidence collection and assessment support workflows
- Create standardized templates, checklists, and assessment playbooks
- Document lessons learned and incorporate process improvements
- Maintain internal knowledge base articles and operational documentation
- Assist in refining SecureITSM’s proprietary CMMC documentation platform workflows and processes
- U.S. Citizenship required
- Detailed understanding of Microsoft Azure, Microsoft Defender, Microsoft Sentinel, Microsoft 365 GCC/GCC High, and related Microsoft security technologies
- 6+ years of cybersecurity experience with strong focus on NIST SP 800-53 and/or NIST SP 800-171
- Experience supporting compliance assessments, audits, or certification activities
- Strong understanding of CMMC assessment methodology and evidence requirements
- Excellent technical writing and communication skills
- Strong project management and organizational abilities
- Exceptional attention to detail
- Ability to manage multiple customer engagements simultaneously
- Experience working directly with external assessors, auditors, or regulatory bodies
- Familiarity with secure project management and compliance collaboration platforms
- PMP certification preferred
- CMMC Certified Professional (CCP) or Certified Assessor (CCA) preferred
- CISSP, CISM, or equivalent cybersecurity certification preferred
- Experience supporting DoD contractors or working within the Defense Industrial Base (DIB)
- Familiarity with FedRAMP and DFARS 252.204-7012
- Experience with SIEM, vulnerability management, and endpoint protection technologies
- Strong leadership and customer engagement skills
- Ability to remain composed and professional during high-pressure assessment activities
- Analytical thinker with strong problem-solving capabilities
- Self-motivated with ability to work independently
- Collaborative team player with strong interpersonal skills
- High level of integrity and professionalism
Posted 2026-06-26
Recommended Jobs
VA-Eligibility Specialist
PONOS MGMT INC
Richmond, VA
Job Description Job Description Organizational Overview Ponos Management, Inc. is a mission-driven healthcare organization dedicated to improving outcomes for Medicaid populations through a ph…
View Details
Posted 2026-06-25
Head Swim Team Coach
YMCA of Greater Richmond
Goochland, VA
Job Description Job Description The Goochland Family YMCA is seeking a part time, experienced swim team coach to serve as Head Coach for our swim team! DUTIES of a Swim Team Coach The Head C…
View Details
Posted 2026-06-25
Indonesian Language Instructor
Ascensus Global Inc.
Reston, VA
Job Description Job Description Description: ABOUT US: Ascensus Global, Inc. (formerly MultiLingual Solutions, Inc.) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) with more than 2…
View Details
Posted 2026-05-29
Lead Technical Project Manager
Nestlé
Arlington, VA
Foods you love. Brands you trust. And a career that empowers you to grow. At Nestlé USA, we’re all working towards the same goal – to delight and deliver for our consumers. With a rich portf…
View Details
Posted 2026-05-13
Inventory Handler - Distribution Center 2nd Shift
CRUTCHFIELD CORPORATION
Charlottesville, VA
Job Description Job Description We Are Now Offering A $500 Hiring Bonus Join Our Family We’re looking for friendly, hardworking folks to join the awesome, high-energy team at our Charlott…
View Details
Posted 2026-06-26
Senior HR Coordinator - Alexandria, VA
rand* construction corporation
Alexandria, VA
Job Description Job Description Love Where You Work! Are you ready to grow your HR career? We’re looking for a Senior HR Coordinator who loves keeping things organized and running smoothly. …
View Details
Posted 2026-05-29
SDR Manager (Federal) - Arlington, VA
Elastic
Arlington, VA
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI …
View Details
Posted 2026-06-24
Coach
Camarillo Fitness Management Holdings LLC
Alexandria, VA
Job Description Job Description Description: Company Overview Orangetheory Fitness is a science-backed, technology-tracked, coach-inspired group workout designed to produce results from the i…
View Details
Posted 2026-06-23
Business Systems Analyst / Agile BA
Cyber Resource
Richmond, VA
*Local candidates only please *Candidate must be able to work onsite 4 days/week during an initial 90-day probationary period; there is a possibility of reduced onsite commitment after successful …
View Details
Posted 2026-06-23
Speech Language Pathologist - Acute Care
MedStar Health
Greenway, VA
About this Job: MedStar Health is looking for a Speech Language Pathologist to join our team at MedStar Washington Hospital Center! As a Speech Language Pathologist , you wi ll provide diag…
View Details
Posted 2026-06-28