CMMC Cybersecurity Consultant

Apply

Job Type

Part-time, Contract

Description

Location: Remote Travel: TBD Job Type: 1099 Pay Range: $100 hourly Part-Time: starting at 5-10 hours per week

Ryan Consulting Group, Inc. is seeking a CMMC Cybersecurity Consultant to support cybersecurity compliance consulting, gap assessments, technical remediation, and assessment readiness services for organizations within the Defense Industrial Base (DIB). This role is responsible for guiding clients through the Cybersecurity Maturity Model Certification (CMMC) Level 2 preparation process, identifying security deficiencies, recommending and implementing corrective actions, and ensuring organizational readiness prior to formal assessment by a Certified Third-Party Assessment Organization (C3PAO).

Key responsibilities include:

• Lead client engagements involving CMMC Level 2 readiness, cybersecurity compliance consulting, gap assessments, and remediation planning.
• Conduct comprehensive NIST SP 800-171 gap assessments to evaluate technical, administrative, and operational security controls.
• Assess client compliance with CMMC Level 2, NIST SP 800-171, DFARS 252.204-7012, and Controlled Unclassified Information (CUI) protection requirements.
• Identify security deficiencies, recommend practical corrective actions, and develop remediation roadmaps and Plans of Action and Milestones (POA&Ms).
• Provide hands-on technical guidance and implementation support for identity and access management, multifactor authentication (MFA), endpoint security, encryption, logging, vulnerability management, network security, and incident response.
• Evaluate and support Microsoft 365 GCC and GCC High environments and secure infrastructure used to process, store, or transmit CUI.
• Collaborate with client IT teams and Managed Service Providers (MSPs) to implement and validate required cybersecurity controls.
• Develop, review, and maintain System Security Plans (SSPs), security policies, procedures, POA&Ms, and supporting compliance documentation.
• Assist clients in preparing assessment evidence, technical demonstrations, personnel interviews, and documentation required during formal CMMC assessments.
• Conduct mock assessments, readiness reviews, and technical validation activities to identify outstanding deficiencies before C3PAO engagement.
• Provide strategic recommendations regarding cybersecurity technologies, security architecture, and compliance solutions.
• Manage client engagements from initial compliance evaluation through remediation, implementation, and final assessment readiness.
• Communicate technical findings, compliance risks, and remediation priorities to client stakeholders and leadership.

Requirements

• Strong working knowledge of CMMC Level 2 requirements, assessment methodologies, and the formal C3PAO assessment process.
• In-depth understanding of NIST SP 800-171 Revision 2, with familiarity with Revision 3 developments and their implications.
• Knowledge of DFARS 252.204-7012, CUI handling requirements, and cybersecurity compliance obligations affecting DoD contractors.
• Demonstrated experience conducting NIST SP 800-171 gap assessments, security control evaluations, and compliance readiness reviews.
• Hands-on experience implementing, configuring, or remediating cybersecurity controls aligned with NIST SP 800-171.
• Experience developing SSPs, POA&Ms, remediation plans, security policies, and supporting compliance evidence.
• Strong technical understanding of identity and access management, MFA, endpoint protection, encryption, security logging, vulnerability management, network security, and incident response.
• Experience working with Microsoft 365 GCC and GCC High environments.
• Ability to identify security deficiencies and translate compliance requirements into actionable technical solutions.
• Experience working directly with clients, internal IT teams, or MSPs to implement cybersecurity improvements.
• Strong communication, documentation, problem-solving, and client-facing consulting skills.
• Ability to independently manage cybersecurity consulting engagements and coordinate assessment preparation activities.

Preferred Qualifications:

• Firsthand experience participating in or supporting a formal CMMC assessment, preferably involving a C3PAO.
• Experience guiding defense contractors through the full CMMC preparation lifecycle, including gap assessments, remediation, control implementation, and assessment readiness.
• Experience conducting mock CMMC assessments and preparing organizations for assessor interviews, evidence reviews, and technical validation.
• Previous experience providing cybersecurity consulting services to organizations within the Defense Industrial Base (DIB).
• Familiarity with common deficiencies identified during CMMC assessments and practical strategies for resolving them.

Preferred Certifications:

• CMMC Certified Professional (CCP)
• Certified CMMC Assessor (CCA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• CompTIA Security+
• Other relevant cybersecurity, NIST SP 800-171, or information security compliance certifications.

Salary Description

1099; PT - $100 hourly