1

Cmmc Auditor Jobs (NOW HIRING)

Perform complex, senior-level auditing and advisory work to develop a new audit program and processes for SOC2 and Department of Defense (DOD) Cybersecurity Maturity Model Certification (CMMC ...

NSF is currently seeking a Senior Auditor, CMMC, to conduct third-party audits for our CMMC clients. In this role, you will be responsible for effective communication with both external clients and ...

NSF is currently seeking a Senior Auditor, CMMC, to conduct third-party audits for our CMMC clients. In this role, you will be responsible for effective communication with both external clients and ...

NSF is currently seeking a Senior Auditor, CMMC, to conduct third-party audits for our CMMC clients. In this role, you will be responsible for effective communication with both external clients and ...

NSF is currently seeking a Senior Auditor, CMMC, to conduct third-party audits for our CMMC clients. In this role, you will be responsible for effective communication with both external clients and ...

NSF is currently seeking a Senior Auditor, CMMC, to conduct third-party audits for our CMMC clients. In this role, you will be responsible for effective communication with both external clients and ...

NSF is currently seeking a Senior Auditor, CMMC, to conduct third-party audits for our CMMC clients. In this role, you will be responsible for effective communication with both external clients and ...

The ideal candidate will have a proven track record in information security, compliance, and auditing, with expertise in NIST 800-171 standards and the CMMC Assessment Process. This role involves ...

The ideal candidate will have a proven track record in information security, compliance, and auditing, with expertise in NIST 800-171 standards and the CMMC Assessment Process. This role involves ...

Lead CMMC Assessor

$135K - $155K/yr

Prior experience as a CMMC Assessor, consultant or IT Auditor. * Strong working knowledge of NIST SP 800-171, NIST SP 800-172, and the CMMC Assessment Process (CAP). * Experience evaluating SSPs, POA ...

Contractor On Demand LRQA CMMC Division - CCA Job Solicitation Leading Global Assurance Partner ... * 1+ year of assessment/auditing experience. * 2+ years of project management experience.

Contractor On Demand LRQA CMMC Division - CCA Job Solicitation Leading Global Assurance Partner ... * 1+ year of assessment/auditing experience. * 2+ years of project management experience.

... auditors. Monitors cybersecurity requirements in solicitations, contracts, modifications, and flow-down provisions, including DFARS 252.204-7012, 252.204-7019, 252.204-7020, 252.204-7021, FAR 52.204 ...

next page

Showing results 1-20

Cmmc Auditor information

See salary details

$10

$19

$46

How much do cmmc auditor jobs pay per hour?

As of Jul 27, 2026, the average hourly pay for cmmc auditor in the United States is $19.21, according to ZipRecruiter salary data. Most workers in this role earn between $14.42 and $19.23 per hour, depending on experience, location, and employer.

What are the typical challenges a CMMC Auditor faces during assessments?

CMMC Auditors often face challenges related to interpreting evolving compliance requirements and navigating complex organizational IT environments. Effectively communicating findings to stakeholders with varying technical backgrounds and maintaining objectivity throughout the audit process can also be demanding. Additionally, auditors must stay current on updates to CMMC guidelines and industry best practices to deliver accurate evaluations. These challenges make critical thinking and adaptability especially important for success in the role.

What are the key skills and qualifications needed to thrive in the Cmmc Auditor position, and why are they important?

To thrive as a CMMC Auditor, you need a robust understanding of cybersecurity frameworks, risk assessment, and compliance standards, usually backed by relevant industry certifications such as CMMC-AB Certified Professional or Lead Auditor credentials. Proficiency with compliance management platforms, audit tools, and familiarity with NIST SP 800-171 controls is essential. Strong analytical skills, attention to detail, and effective communication are key soft skills for engaging with clients and preparing thorough audit reports. These abilities ensure accurate assessments, help organizations achieve CMMC certification, and maintain the integrity of sensitive information systems.

What is a CMMC Auditor job?

A CMMC Auditor evaluates an organization's cybersecurity practices to ensure compliance with the Cybersecurity Maturity Model Certification (CMMC) framework. They assess security controls, policies, and procedures to verify they meet the required maturity level for handling controlled unclassified information (CUI). Auditors may work for a Certified Third-Party Assessment Organization (C3PAO) and conduct official CMMC assessments. Their role is critical in helping defense contractors meet Department of Defense (DoD) cybersecurity requirements.

More about Cmmc Auditor jobs
What cities are hiring for Cmmc Auditor jobs? Cities with the most Cmmc Auditor job openings:
What states have the most Cmmc Auditor jobs? States with the most job openings for Cmmc Auditor jobs include:
Infographic showing various Cmmc Auditor job openings in the United States as of July 2026, with employment types broken down into 89% Full Time, 8% Part Time, 2% Contract, and 1% Nights. Highlights an 87% Physical, 6% Hybrid, and 7% Remote job distribution, with an average salary of $39,947 per year, or $19.2 per hour.
SOC2 & CMMC Internal Auditor Liaison

SOC2 & CMMC Internal Auditor Liaison

Victory

Remote

Full-time

Posted 21 days ago


Job description

You will work with our engineers, support representatives, and external auditors to:
  • Perform complex, senior-level auditing and advisory work to develop a new audit program and processes for SOC2 and Department of Defense (DOD) Cybersecurity Maturity Model Certification (CMMC) / FedRAMP.
  • Conduct research, benchmarking, examining and reviewing records & financial statements.
  • Perform data & risk analyses, identify appropriate controls, assess business processes, and evaluate management processes.
  • Manage the development of an appropriate audit scope, selection of an external auditor, and successful completion of audits annually.
  • Continuously collect operational documentation and data samples in order to close process gaps or to document accepted risk before a gap becomes a finding.
  • Maintain relationships with our external auditors to anticipate changes to audit focuses and prepare the organization for them.
  • Educate the organization about audit requirements, risk analysis and controls, and assist us with integrating best practices into our existing operational framework.
  • Identify and document corrective actions that need to be taken based on audit reports.
  • Respond to client requests for documentation of our processes and audit reports.
  • Understand and follow changes to CUECs from our partners and vendors.

Requirements
You have experience with:
  • Auditing in accordance with generally accepted auditing standards and risk-based internal auditing.
  • Basic information technology controls in a cloud environment.
  • Analyzing, interpreting, and summarizing data, policies, and procedures for effective performance of audit work.
  • Establishing and maintaining trust-based relationships with internal and external stakeholders.

You should...
  • Have advanced writing and communication skills.
  • Be willing to apply your skills across our small organization, from the low level (e.g. writing process documentation) to high level (e.g. developing organizational audit plans).
  • Help us maintain the culture and values of our organization.

It would be a plus if you have...
  • Some experience with DOD cybersecurity requirements and contracts, e.g. NIST 800-171.
  • Some experience with FedRAMP requirements.