ZipRecruiter

Log In

1

Cmmc Audit Jobs (NOW HIRING)

DigiFlight

Certified CMMC Professional

Columbia, MD · On-site

Cybersecurity * IT audit or compliance * Governance, Risk, and Compliance (GRC) * Information systems or IT operations Working knowledge of: * CMMC Level 1 and Level 2 requirements * NIST SP 800-171

Red Cup IT, Inc.

CMMC Security Engineer

Los Angeles, CA · On-site +1

Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings. * Collaborate with compliance managers, legal/data ...

Red Cup IT Inc

CMMC Security Engineer

Los Angeles, CA · On-site +1

Prepare for and facilitate CMMC assessments (self and third-party), maintain certification documentation (SSP, POA&M), and address audit findings. * Collaborate with compliance managers, legal/data ...

Velero

CMMC Level 2 Certified Assessor

Tampa, FL · On-site +1

Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards. * Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ...

The Armor Group

CMMC Compliance Manager

Mason, OH · On-site

... CMMC), ensuring alignment with NIST SP 800-171 and applicable DFARS clauses, and managing the ... is audit-ready at all times. They are the primary point of accountability when a C3PAO assessor ...

Velero

CMMC Level 2 Certified Assessor

Tampa, FL · Remote

Prepare comprehensive audit reports, including findings, recommendations, and remediation plans, following CMMC-AB standards. * Collaborate with a C3PAO (CMMC Third-Party Assessment Organization) to ...

Sitka Inc.

Defense Compliance Program Leader

Elkton, MD · On-site

$130 - $170/hr

  • Medical

  • Dental

  • Vision

Lead CMMC audit readiness, SSP governance, and evidence coordination, plus oversight of Export Control audits and corrective actions * Own governance of compliance communications and drive training ...

VAYLENT

Principal Network Engineer

Santa Fe Springs, CA · On-site

$135K - $165K/yr

Establish visibility -- stand up network monitoring/NMS and maintain current network documentation and diagrams (also serving as CMMC audit evidence). * Sustain reliability -- supporting a 24/7 ...

next page

Showing results 1-20

All JobsCmmc Audit Jobs

Cmmc Audit information

See salary details

$61K

$120.2K

$157.5K

How much do cmmc audit jobs pay per year?

As of Aug 16, 2026, the average yearly pay for cmmc audit in the United States is $120,236.00, according to ZipRecruiter salary data. Most workers in this role earn between $104,000.00 and $136,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a CMMC auditor?

To thrive as a CMMC Auditor, you need a deep understanding of cybersecurity frameworks, risk management, and compliance standards, often supported by related degrees and cybersecurity certifications such as CISA, CISSP, or CMMC Provisional Assessor. Familiarity with audit management software, NIST SP 800-171 controls, and CMMC assessment tools is typically required. Strong analytical thinking, communication, and attention to detail are crucial soft skills for interpreting requirements and engaging with clients. These skills ensure accurate, thorough assessments and help organizations achieve and maintain compliance with CMMC requirements.

What is the difference between Cmmc Audit vs Cmmc Consultant?

AspectCmmc AuditCmmc Consultant
CertificationsRequires CMMC Auditor CertificationRequires CMMC Consultant Certification
Work EnvironmentConducts assessments, audits, and compliance reviewsProvides advisory, gap analysis, and implementation support
Employer & Industry UsagePrimarily in government contracting firms needing auditsConsulting firms and contractors seeking CMMC guidance

While both roles focus on CMMC compliance, Cmmc Auditors primarily perform assessments and audits to verify compliance, whereas Cmmc Consultants offer strategic advice and support for achieving CMMC standards. Understanding these differences helps organizations choose the right professional for their cybersecurity needs.

What is a CMMC audit?

A CMMC audit is a formal assessment conducted to determine if an organization meets the cybersecurity requirements outlined in the Cybersecurity Maturity Model Certification (CMMC) framework. This framework was developed by the U.S. Department of Defense to safeguard sensitive information within the defense industrial base. During the audit, a certified third-party assessor evaluates the organization's policies, processes, and technical controls to ensure compliance with the specific CMMC level required for their contracts. Successfully passing a CMMC audit is mandatory for contractors and subcontractors working with the DoD. The audit process helps organizations identify gaps in their cybersecurity posture and implement necessary improvements.

What are some common challenges faced by professionals conducting a CMMC audit, and how can they be addressed?

CMMC auditors often encounter challenges such as varying levels of cybersecurity maturity across organizations, incomplete documentation, and resistance to change within client teams. To address these, auditors need strong communication skills to clearly explain requirements, collaborate closely with client stakeholders, and adapt auditing approaches to different organizational structures. Staying up-to-date with evolving CMMC standards and maintaining meticulous records also help ensure a thorough and efficient audit process.
More about Cmmc Audit jobs

What cities are hiring for Cmmc Audit jobs?

Cities with the most Cmmc Audit job openings:

What states have the most Cmmc Audit jobs?

States with the most job openings for Cmmc Audit jobs include:

What job categories do people searching Cmmc Audit jobs look for?

The top searched job categories for Cmmc Audit jobs are:

Cmmc Audit jobs near you
Infographic showing various Cmmc Audit job openings in the United States as of August 2026, with employment types broken down into 1% Internship, 90% Full Time, 5% Part Time, 1% Temporary, and 3% Contract. Highlights an 86% Physical, 6% Hybrid, and 8% Remote job distribution, with an average salary of $120,236 per year, or $57.8 per hour.

Certified CMMC Professional

DigiFlight

Columbia, MD • On-site

Other

Posted 13 days ago

Job description

Certified CMMC Professional (CCP)

The Certified CMMC Professional (CCP) supports both CMMC readiness engagements and formal assessment activities by evaluating an organization's cybersecurity practices against CMMC requirements. This role contributes to control implementation validation, documentation analysis, and assessment execution, while ensuring alignment with the CMMC Assessment Process (CAP).

Readiness & Advisory Support

  • Support organizations in preparing for CMMC Level 1 and Level 2 certification
  • Perform gap assessments against:
  • CMMC requirements
  • NIST SP 800-171 controls
  • Assist in the development and refinement of:
  • System Security Plans (SSPs)
  • POA&Ms
  • Policies and procedures
  • Help identify and remediate control deficiencies prior to formal assessment
  • Provide guidance on:
  • Control implementation expectations
  • Evidence requirements
  • Certification boundary considerations

Minimum Experience

  • 3–5 years of experience in:
  • Cybersecurity
  • IT audit or compliance
  • Governance, Risk, and Compliance (GRC)
  • Information systems or IT operations

Working knowledge of:

  • CMMC Level 1 and Level 2 requirements
  • NIST SP 800-171
  • CMMC Assessment Process (CAP)
  • FedRAMP
  • SOC 2

Required Skills

  • Experience supporting:
  • Security assessments or audits
  • Compliance frameworks (e.g., FedRAMP, SOC 2, ISO 27001)
  • Familiarity with DoD contractor environments and Controlled Unclassified Information (CUI)
  • Analytical thinking and attention to detail
  • Ability to interpret control requirements and supporting evidence
  • Strong written and verbal communication skills
  • Ability to operate in both advisory and assessment roles with discipline

Considerations

  • Must avoid conflicts of interest in accordance with applicable CMMC ecosystem expectations

Apply