ZipRecruiter

Log In

1

Cmmc Audit Jobs (NOW HIRING)

Red Cup IT Inc

CMMC Security Engineer

Los Angeles, CA · On-site +1

Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings. * Collaborate with compliance managers, legal/data ...

Red Cup IT, Inc.

CMMC Security Engineer

Los Angeles, CA · On-site +1

Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings. * Collaborate with compliance managers, legal/data ...

Velero

CMMC Level 2 Certified Assessor

Tampa, FL · On-site +1

Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards. * Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ...

The Armor Group

CMMC Compliance Manager

Mason, OH · On-site

... CMMC), ensuring alignment with NIST SP 800-171 and applicable DFARS clauses, and managing the ... is audit-ready at all times. They are the primary point of accountability when a C3PAO assessor ...

Red Cup IT

CMMC Security Engineer

... audit findings. • Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls. • Oversee CMMC ...

Velero

CMMC Level 2 Certified Assessor

Tampa, FL · Remote

Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards. * Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ...

Balfour Beatty US

CMMC Program Manager

Falls Church, VA · On-site

$125 - $195/hr

Lead annual CMMC self-assessments, risk assessments, internal audits, certification readiness activities, and coordination with Certified Third-Party Assessment Organizations (C3PAOs) for external ...

Balfour Beatty US

$125 - $195/hr

Lead annual CMMC self-assessments, risk assessments, internal audits, certification readiness activities, and coordination with Certified Third-Party Assessment Organizations (C3PAOs) for external ...

VAYLENT

Principal Network Engineer

Santa Fe Springs, CA · On-site

$135K - $165K/yr

Establish visibility -- stand up network monitoring/NMS and maintain current network documentation and diagrams (also serving as CMMC audit evidence). * Sustain reliability -- supporting a 24/7 ...

Balfour Beatty

CMMC Program Manager

Falls Church, VA · On-site

$123K - $124K/yr

Lead annual CMMC self-assessments, risk assessments, internal audits, certification readiness activities, and coordination with Certified Third-Party Assessment Organizations (C3PAOs) for external ...

next page

Showing results 1-20

All JobsTechnology JobsCmmc Audit Jobs

Cmmc Audit information

See salary details

$61K

$120.2K

$157.5K

How much do cmmc audit jobs pay per year?

As of Sep 6, 2026, the average yearly pay for cmmc audit in the United States is $120,236.00, according to ZipRecruiter salary data. Most workers in this role earn between $104,000.00 and $136,500.00 per year, depending on experience, location, and employer.

What is a CMMC audit?

A CMMC audit is a formal assessment conducted to determine if an organization meets the cybersecurity requirements outlined in the Cybersecurity Maturity Model Certification (CMMC) framework. This framework was developed by the U.S. Department of Defense to safeguard sensitive information within the defense industrial base. During the audit, a certified third-party assessor evaluates the organization's policies, processes, and technical controls to ensure compliance with the specific CMMC level required for their contracts. Successfully passing a CMMC audit is mandatory for contractors and subcontractors working with the DoD. The audit process helps organizations identify gaps in their cybersecurity posture and implement necessary improvements.

What are the key skills and qualifications needed to thrive as a CMMC auditor?

To thrive as a CMMC Auditor, you need a deep understanding of cybersecurity frameworks, risk management, and compliance standards, often supported by related degrees and cybersecurity certifications such as CISA, CISSP, or CMMC Provisional Assessor. Familiarity with audit management software, NIST SP 800-171 controls, and CMMC assessment tools is typically required. Strong analytical thinking, communication, and attention to detail are crucial soft skills for interpreting requirements and engaging with clients. These skills ensure accurate, thorough assessments and help organizations achieve and maintain compliance with CMMC requirements.

What are some common challenges faced by professionals conducting a CMMC audit, and how can they be addressed?

CMMC auditors often encounter challenges such as varying levels of cybersecurity maturity across organizations, incomplete documentation, and resistance to change within client teams. To address these, auditors need strong communication skills to clearly explain requirements, collaborate closely with client stakeholders, and adapt auditing approaches to different organizational structures. Staying up-to-date with evolving CMMC standards and maintaining meticulous records also help ensure a thorough and efficient audit process.

What is the difference between Cmmc Audit vs Cmmc Consultant?

AspectCmmc AuditCmmc Consultant
CertificationsRequires CMMC Auditor CertificationRequires CMMC Consultant Certification
Work EnvironmentConducts assessments, audits, and compliance reviewsProvides advisory, gap analysis, and implementation support
Employer & Industry UsagePrimarily in government contracting firms needing auditsConsulting firms and contractors seeking CMMC guidance

While both roles focus on CMMC compliance, Cmmc Auditors primarily perform assessments and audits to verify compliance, whereas Cmmc Consultants offer strategic advice and support for achieving CMMC standards. Understanding these differences helps organizations choose the right professional for their cybersecurity needs.

How to become a CMMC auditor?

To become a CMMC auditor, individuals typically need a background in cybersecurity, information technology, or related fields, along with experience in security assessments. They must complete specific CMMC auditor training and certification programs approved by the CMMC Accreditation Body (CMMC-AB), which include passing exams and demonstrating knowledge of CMMC requirements and assessment procedures.

Who performs CMMC audits?

CMMC audits are performed by certified third-party assessment organizations (C3PAOs) authorized by the Cybersecurity Maturity Model Certification Accreditation Body. These auditors are trained to evaluate a company's cybersecurity practices and compliance with CMMC requirements, often requiring specific certifications and experience in cybersecurity and auditing. The process involves a thorough review of security controls, documentation, and implementation to ensure adherence to CMMC standards.
More about Cmmc Audit jobs

What cities are hiring for Cmmc Audit jobs?

Cities with the most Cmmc Audit job openings:

What states have the most Cmmc Audit jobs?

States with the most job openings for Cmmc Audit jobs include:

What job categories do people searching Cmmc Audit jobs look for?

The top searched job categories for Cmmc Audit jobs are:

Cmmc Audit jobs near you
Infographic showing various Cmmc Audit job openings in the United States as of August 2026, with employment types broken down into 92% Full Time, 5% Part Time, 1% Temporary, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $120,236 per year, or $57.8 per hour.

CMMC Security Engineer

Red Cup IT Inc

Los Angeles, CA • On-site, Remote

Full-time

Re-posted yesterday

Job description

We are looking for a CMMC Security Engineer is responsible for implementing, maintaining, and leading cybersecurity efforts to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) standards, focusing on protecting Controlled Unclassified Information (CUI) for organizations in the Defense Industrial Base (DIB).
Key Responsibilities
  • Design, implement, and monitor security controls aligned with CMMC requirements, including access controls, encryption, endpoint protection, and secure configurations.
  • Lead vulnerability assessments, scan remediation tracking, and continuous risk management across hybrid and cloud environments.
  • Support incident response, threat hunting, and forensic analysis for cybersecurity events.
  • Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings.
  • Collaborate with compliance managers, legal/data protection officers, and operations teams to ensure continuous alignment with NIST SP 800-171/DFARS controls.
  • Oversee CMMC continuous monitoring programs and identify compliance gaps in workflows.
  • Provide security awareness training and promote a culture of cybersecurity vigilance across departments.
Required Skills
  • Deep understanding of CMMC 2.0 framework, NIST SP 800-171, and DFARS requirements.
  • Experience conducting technical assessments, vulnerability management, and implementing FedRAMP Moderate or equivalent systems for CUI.
  • Strong documentation skills for policies, procedures, and audit support.
  • Ability to communicate technical findings to both technical and non-technical stakeholders.
  • Knowledge of cloud (e.g., Azure, Microsoft 365) and on-premise security technologies.
Typical Qualifications
  • Bachelor's degree in Information Security, Computer Science, or a related field.
  • Professional certifications such as CISSP, CISM, GIAC, or CCA/CCP (CMMC-specific certifications preferred).
  • Experience supporting DoD compliance or federal contracts is highly valued.
Job Purpose
The role ensures a secure and compliant enclave for CUI, mitigates cybersecurity risks, leads compliance projects, and prepares for third-party assessments and audits under the evolving CMMC 2.0 regulations.

Apply