ZipRecruiter

Log In

1

Cmmc Audit Jobs (NOW HIRING)

Ariento Inc

... a third-party audit * Conduct reviews of security artifacts and aid completing required ... Help grow Ariento's CMMC practice by contributing to the development of our capabilities ...

Unique Hardware Software Systems Company in Major Growth Mode

Be Seen First

Senior Manager of IT-Security Infras.Cloud, with NIST, ISO, CMMC compl

Sully Station, VA · On-site

$150K - $195K/yr

Experience leading ongoing self-audits and updates to documentation and plans surrounding risk, compliance, IT Security, R&D Information Sharing and related areas; experience with NIST and or CMMC ...

Ariento Inc

... a third-party audit * Conduct reviews of security artifacts and aid completing required ... Help grow Ariento's CMMC practice by contributing to the development of our capabilities ...

Schellman

Senior Associate, CMMC

Our professional services focus on security and privacy audits, assessments, and certifications ... As a CMMC Senior Associate at Schellman, you will play a critical role in delivering high-quality ...

Hypori

Senior Manager, DIB & CMMC Marketing

We need someone who has lived in the DIB world: who understands what a CMMC Program Lead actually does, what it feels like to be a CISO at a Tier-2 sub staring at a C3PAO audit, and what language ...

PCL

CMMC Compliance Manager

Denver, CO · On-site

$127 - $175/hr

The CMMC Compliance Manager will be responsible for supporting the company's U.S. government ... Experience coordinating compliance documentation, assessments, evidence collection, or audit ...

Schellman

Senior Associate, CMMC

Our professional services focus on security and privacy audits, assessments, and certifications ... As a CMMC Senior Associate at Schellman, you will play a critical role in delivering high-quality ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsCmmc Audit Jobs

Cmmc Audit information

See salary details

$61K

$120.2K

$157.5K

How much do cmmc audit jobs pay per year?

As of Sep 6, 2026, the average yearly pay for cmmc audit in the United States is $120,236.00, according to ZipRecruiter salary data. Most workers in this role earn between $104,000.00 and $136,500.00 per year, depending on experience, location, and employer.

What is a CMMC audit?

A CMMC audit is a formal assessment conducted to determine if an organization meets the cybersecurity requirements outlined in the Cybersecurity Maturity Model Certification (CMMC) framework. This framework was developed by the U.S. Department of Defense to safeguard sensitive information within the defense industrial base. During the audit, a certified third-party assessor evaluates the organization's policies, processes, and technical controls to ensure compliance with the specific CMMC level required for their contracts. Successfully passing a CMMC audit is mandatory for contractors and subcontractors working with the DoD. The audit process helps organizations identify gaps in their cybersecurity posture and implement necessary improvements.

What are the key skills and qualifications needed to thrive as a CMMC auditor?

To thrive as a CMMC Auditor, you need a deep understanding of cybersecurity frameworks, risk management, and compliance standards, often supported by related degrees and cybersecurity certifications such as CISA, CISSP, or CMMC Provisional Assessor. Familiarity with audit management software, NIST SP 800-171 controls, and CMMC assessment tools is typically required. Strong analytical thinking, communication, and attention to detail are crucial soft skills for interpreting requirements and engaging with clients. These skills ensure accurate, thorough assessments and help organizations achieve and maintain compliance with CMMC requirements.

What are some common challenges faced by professionals conducting a CMMC audit, and how can they be addressed?

CMMC auditors often encounter challenges such as varying levels of cybersecurity maturity across organizations, incomplete documentation, and resistance to change within client teams. To address these, auditors need strong communication skills to clearly explain requirements, collaborate closely with client stakeholders, and adapt auditing approaches to different organizational structures. Staying up-to-date with evolving CMMC standards and maintaining meticulous records also help ensure a thorough and efficient audit process.

What is the difference between Cmmc Audit vs Cmmc Consultant?

AspectCmmc AuditCmmc Consultant
CertificationsRequires CMMC Auditor CertificationRequires CMMC Consultant Certification
Work EnvironmentConducts assessments, audits, and compliance reviewsProvides advisory, gap analysis, and implementation support
Employer & Industry UsagePrimarily in government contracting firms needing auditsConsulting firms and contractors seeking CMMC guidance

While both roles focus on CMMC compliance, Cmmc Auditors primarily perform assessments and audits to verify compliance, whereas Cmmc Consultants offer strategic advice and support for achieving CMMC standards. Understanding these differences helps organizations choose the right professional for their cybersecurity needs.

How to become a CMMC auditor?

To become a CMMC auditor, individuals typically need a background in cybersecurity, information technology, or related fields, along with experience in security assessments. They must complete specific CMMC auditor training and certification programs approved by the CMMC Accreditation Body (CMMC-AB), which include passing exams and demonstrating knowledge of CMMC requirements and assessment procedures.

Who performs CMMC audits?

CMMC audits are performed by certified third-party assessment organizations (C3PAOs) authorized by the Cybersecurity Maturity Model Certification Accreditation Body. These auditors are trained to evaluate a company's cybersecurity practices and compliance with CMMC requirements, often requiring specific certifications and experience in cybersecurity and auditing. The process involves a thorough review of security controls, documentation, and implementation to ensure adherence to CMMC standards.
More about Cmmc Audit jobs

What cities are hiring for Cmmc Audit jobs?

Cities with the most Cmmc Audit job openings:

What states have the most Cmmc Audit jobs?

States with the most job openings for Cmmc Audit jobs include:

What job categories do people searching Cmmc Audit jobs look for?

The top searched job categories for Cmmc Audit jobs are:

Cmmc Audit jobs near you
Infographic showing various Cmmc Audit job openings in the United States as of August 2026, with employment types broken down into 92% Full Time, 5% Part Time, 1% Temporary, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $120,236 per year, or $57.8 per hour.

Senior CMMC Consultant

Ariento Inc

On-site

Full-time

Re-posted 18 days ago

Key responsibilities

  • Perform CMMC readiness consulting engagements to assess client's security controls and produce gap analysis reports.

  • Review documentation, validate evidence, and develop security artifacts such as SSPs, POA&Ms, and policies.

  • Participate in assessment teams to support all phases of CMMC Level 2 assessments and assist in closing POA&Ms.

Job description

Ariento is seeking a Senior Consultant to join our Advisory and Consulting Team and act as a Cybersecurity Maturity Model Certification (CMMC) Subject Matter Expert (SME). This role will:

  • Perform consulting/readiness and compliance services for organizations seeking compliance with CMMC, DFARS 252.204-7012, NIST SP 00-171, and FedRAMP
  • Conduct readiness/consulting services directly with our clients to assess their cybersecurity posture and improve the effectiveness of their security controls in preparation for a third-party audit
  • Conduct reviews of security artifacts and aid completing required documentation to include: SSPs, POA&Ms, Policies, Procedures, Plans, dataflow diagrams, network diagrams, and other documents
  • Assume responsibility for the successful execution and delivery of compliance assessments to include CMMC, FedRAMP, and NIST as part of Ariento’s C3PAO team
  • Help grow Ariento’s CMMC practice by contributing to the development of our capabilities, methodology and foster a continuous improvement environment
  • Work with practice leadership to build client relationships and identify sales opportunities.

Role Responsibilities:

You should also be able to deliver on the following expertly and consistently:

  • Perform CMMC Readiness consulting engagements to assess client’s security controls against CMMC requirements and produce detailed gap analysis reports
  • Verify and document the implementation of security controls necessary to achieve compliance
  • Lead remediation engagements to help clients meet security controls and prepare them for a third-party assessment.
  • Participate as part of the Assessment Team during CMMC Level 2 assessments and support the Lead Assessor across all phases of the assessment: Plan & Prepare the Assessment, Conduct the Assessment, Report Assessment Results, Close out POA&Ms and Assessment
  • Review documentation, validate evidence, and identify security and compliance gaps
  • Review and develop System Security Plans (SSPs), Plans of Actions and Milestones (POA&Ms), and as well as necessary artifacts
  • Develop various policy documents (SOPs) as required. This may include policies regarding Configuration Management, IS Sanitization, Media Security, Password Policy, Business Continuity, Continuity of Operations, Incident Response, Disaster Recovery, and Security Assessments
  • Support the development of assessment reports, including findings, recommendations, and action plans
  • Work closely with clients to address security and compliance concerns, provide guidance, and ensure regulatory requirements are met against industry frameworks.
  • Participate in client meetings, take effective notes, and ask relevant questions to gather information
  • Contribute to the continuous improvement of the organization's cyber security and compliance practices, methodologies, and tools
  • Maintain up-to-date knowledge of regulatory changes, emerging threats, and industry trends
  • Ensure that all deliverables are of the highest quality and that tasks are executed in accordance project timelines and budgets
  • Support business development and RFP activities

Required Skills and Qualifications

  • 5+ years of experience with conducting security control assessments against industry frameworks, including CMMC, NIST RMF, NIST SP 800-171, NIST 800-53, etc.
  • A US citizen who can pass a suitability determination process from the DoD
  • A deep knowledge of CMMC 2.0
  • Candidate must possess or be able to obtain at least one or more of the following: CMMC Certified Assessor (CCA) (Preferred) OR CMMC Certified Professional (CCP) (Minimum)
  • Bachelor’s degree in business administration, computer science, IT, cybersecurity, or related field/experience.
  • Team player able to work well with others in a collaborative manner and is a self-starter who can work with minimum supervision
  • Work to continually build and improve solid and well-rounded practices and processes
  • Excellent communication skills, both written and verbal with strong presentation skills
  • Ability to interact with clients and represent the company in a professional manner
  • Ability to successfully manage multiple tasks with competing priorities
  • Strong customer service and consulting experience
  • Experience with preparing and delivering executive level reporting
  • 5+ years in a consulting role specifically client facing
  • Experience with Windows and Linux system administration
  • Ability to travel as required.

Preferred Qualifications

  • CISSP, CISM, CISA, CCA, CCP or related certification preferred