1

Cmmc Assessor Jobs in Rochester, NY (NOW HIRING)

Cmmc Assessor information

See Rochester, NY salary details

$32.1K

$74.3K

$123.8K

How much do cmmc assessor jobs pay per year?

As of Aug 24, 2026, the average yearly pay for cmmc assessor in Rochester, NY is $74,256.00, according to ZipRecruiter salary data. Most workers in this role earn between $45,400.00 and $95,700.00 per year, depending on experience, location, and employer.

What is a CMMC Assessor?

A CMMC Assessor is a certified professional responsible for evaluating an organization's cybersecurity practices against the Cybersecurity Maturity Model Certification (CMMC) framework. They conduct assessments to ensure compliance with cybersecurity requirements set by the Department of Defense (DoD) for contractors handling Controlled Unclassified Information (CUI). CMMC Assessors work with Certified Third-Party Assessment Organizations (C3PAOs) to perform audits, document findings, and provide recommendations for achieving the necessary certification level. Their role is critical in helping organizations secure government contracts by verifying their adherence to required cybersecurity standards.

What does a CMMC Assessor do?

A typical day for a CMMC Assessor involves reviewing cybersecurity policies, conducting in-depth interviews with client personnel, examining technical controls, and documenting assessment findings. CMMC Assessors often work on-site at client locations or remotely, collaborating closely with IT teams and management to validate controls and clarify requirements. The role frequently includes preparing reports, communicating results to stakeholders, and recommending remediation steps where necessary. This position is detail-oriented and dynamic, offering a mix of independent work and teamwork while supporting organizations in achieving and maintaining CMMC certification.

What are the key skills and qualifications needed to thrive as a CMMC Assessor?

To thrive as a CMMC Assessor, you need a comprehensive understanding of cybersecurity frameworks, risk management, and the CMMC (Cybersecurity Maturity Model Certification) standard, typically demonstrated by industry experience and relevant certifications such as CMMC-AB Certified Assessor or CISSP. Familiarity with assessment tools, audit software, and NIST frameworks is critical for evaluating organizations' compliance. Strong analytical thinking, attention to detail, and excellent communication skills help explain findings and recommendations to clients. These skills and qualities are essential for ensuring accurate, credible assessments and guiding organizations toward regulatory compliance.

How to become a CMMC assessor?

To become a CMMC assessor, individuals typically need relevant experience in cybersecurity, auditing, or compliance, along with specific training provided by authorized bodies such as the CMMC Accreditation Body. They must complete assessor training courses, pass certification exams, and demonstrate knowledge of CMMC requirements and assessment procedures. Maintaining ongoing education and recertification is also necessary to stay current with evolving standards.

What are popular job titles related to Cmmc Assessor jobs in Rochester, NY?

For Cmmc Assessor jobs in Rochester, NY, the most frequently searched job titles are:

What job categories do people searching Cmmc Assessor jobs in Rochester, NY look for?

The top searched job categories for Cmmc Assessor jobs in Rochester, NY are:

What cities near Rochester, NY are hiring for Cmmc Assessor jobs?

Cities near Rochester, NY with the most Cmmc Assessor job openings:

Infographic showing various Cmmc Assessor job openings in Rochester, NY as of August 2026, with employment types broken down into 73% Full Time, 22% Part Time, 1% Temporary, and 4% Contract. Highlights an 75% Physical, 3% Hybrid, and 22% Remote job distribution, with an average salary of $74,256 per year, or $35.7 per hour.

Research Security Compliance Specialist III

Rochester Institute of Technology

Rochester, NY • On-site

$72K - $116K/yr

Full-time

Posted 6 days ago


Rochester Institute Of Technology rating

7.6

Company rating: 7.6 out of 10

Based on 32 frontline employees who took The Breakroom Quiz

290th of 622 rated colleges and universities


Job description

Position Highlights
  • Serve as RIT's lead resource for research security and sponsored research compliance, supporting federally funded and industry-sponsored research projects.
  • Coordinate compliance efforts related to CMMC 2.0, FCI, CUI, HIPAA, NSPM-33, GDPR, and other research security and data protection requirements.
  • Partner with principal investigators, sponsors, and campus stakeholders to assess compliance needs, develop project-specific security documentation, support audits and assessments, and ensure sponsored research activities meet regulatory and sponsor expectations.
  • Help translate complex sponsor and regulatory requirements into practical processes, policies, training, and institutional controls that enable research success while maintaining compliance.
  • Promote a culture of ethics, accountability, and compliance across the university's research enterprise.

This position is fully on campus and is not eligible for remote work. To receive full consideration, applicants must submit both a resume and cover letter with their application.
Sponsored Research Services, Office of the Vice President for Research
Sponsored Research Services (SRS) supports RIT's research community by providing guidance and oversight throughout the sponsored research lifecycle. Working closely with faculty, research staff, and campus partners, SRS helps ensure that research activities meet sponsor requirements and applicable regulations while advancing the university's research mission.
The Research Security and Compliance Specialist plays a key role in strengthening RIT's research security and compliance framework. This position collaborates with stakeholders across the university, including the Information Security Office, Research Computing, Information & Technology Services, Institute Audit, and academic units, to support secure research practices, data protection, and regulatory compliance. Through partnership, education, and process development, the team helps researchers navigate evolving security requirements and successfully manage sponsored research projects.
Essential Duties & Responsibilities
  • Oversees compliance component of RIT's CMMC program for sponsored research cybersecurity. Assists cross-functional team with policy creation, implementation, operations, program roadmap, requirements, tracking of compliance gaps, and preparation for self-assessment and third-party assessment. Provides final compliance sign-off on processes needed to comply with federal and sponsor standards and other information research security standards
  • Ensures projects requiring protected research data are reviewed and supported before work begins. Assists with identifying cybersecurity and controlled-data obligations during proposal development, contract review, award set up, data use agreement review and project initiation.
  • Provides gap analysis and creates individualized information research security control plans for projects as necessary. Provides compliance certifications to sponsors. Documents processes and records demonstrating RIT reviews, attestations, and required training occurred on every sponsored project
  • Provides guidance, training, and consultation to research community, including developing and delivering training
  • Advises research community on information research security regulations, changes, and compliance processes
  • Other duties as assigned

Knowledge, Skills, & Abilities
  • Knowledge of local, state, and federal laws and regulations that govern information research compliance standards
  • Knowledge of federal cybersecurity and controlled-research-data requirements impacting sponsored research
  • Understanding of network security, firewalls, encryption, cloud computing standards, and workstation security
  • Skill in risk assessment and mitigation in the management of research compliance strategies
  • Skill in effective communication and collaboration with internal and external stakeholders regarding complex or technical topics
  • Skill in technical, legal, and compliance writing
  • Ability to establish and maintain relationships with state and federal regulatory agencies

Minimum Education & Experience
  • Master's degree in related field
  • 5 years of relevant experience
  • An equivalent combination of education and experience may be considered

Job Level Overview
Specialized Contributor Level 3 - A senior-level role requiring broad understanding of the profession or field of work. Independently leads diverse and often complex assignments, projects, or programs. May act as a mentor and guide less experienced staff.
FLSA Category
Exempt
Work Location
On Campus
Compensation
$72,500.00 - $116,000.00 Annual
Application Materials
When you are ready to complete an application for this position please be prepared to submit the below requested information. This will be required to ensure your application is processed in a timely manner.
Cover Letter, Curriculum Vitae or Resume
Candidates must be eligible to work in the United States.
Additional Details
In compliance with NYS's Pay Transparency Act, the salary range for this position is listed above. Rochester Institute of Technology considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. The hiring process for this position may require a criminal background check and/or motor vehicle records check. Any verbal or written offer made is contingent on satisfactory results, as determined by Human Resources. RIT provides equal opportunity to all qualified individuals and does not discriminate on the basis of race, color, creed, age, marital status, sex, gender, religion, sexual orientation, gender identity, gender expression, national origin, veteran status or disability in its hiring, admissions, educational programs and activities. RIT provides reasonable accommodations to applicants with disabilities under the Rehabilitation Act, the Americans with Disabilities Act, the New York Human Rights Law, or similar applicable law.
If you need reasonable accommodation for any part of the application and hiring process, please contact the Human Resources office at 585-475-2424 or email your request to careers@rit.edu. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.

What Rochester Institute Of Technology employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom


Rochester Institute of Technology logo

About Rochester Institute of Technology

Sourced by ZipRecruiter

Rochester Institute of Technology (RIT) is a preeminent institution in the education services industry, located in Rochester, NY, US. Renowned globally for its innovative and industry-aligned education, RIT was established in 1829 and has since then been committed to offering academic rigor in fields of study with an emphasis on applied learning. This is evidenced by their broad spectrum of undergraduate and graduate programs in areas such as engineering, science, business, and fine arts. RIT's mission centers on providing technology-based educational programs for career-minded students.

Industry

Colleges, universities, and professional schools

Company size

1,001 - 5,000 Employees

Headquarters location

Rochester, NY, US

Year founded

1829

Social media