Cmmc Environment Jobs in Virginia (NOW HIRING)

• ​​​​​​​​​​​​​​​​​​​​Maintain the master CMMC customer assessment schedule
• Coordinate assessment timelines with customers, C3PAOs, and internal SecureITSM teams
• Conduct readiness reviews and pre-assessment planning meetings
• Track customer assessment milestones, dependencies, and remediation activities
• Manage customer communications related to assessment preparation and scheduling
• Coordinate Rules of Engagement (ROE), assessment logistics, and secure evidence transfer processes
• Monitor assessment status and provide executive-level reporting on customer readiness
• Assist customers in understanding assessment scope, boundary definitions, and enclave considerations ​​​​​​​​​​​​​​

• Update implementation statements as needed
• Gather and organize evidentiary artifacts
• Coordinate customer evidence collection activities
• Review SSPs, policies, procedures, and supporting documentation for assessment readiness
• Validate evidence traceability to NIST SP 800-171 requirements and assessment objectives
• Prepare assessor-ready evidence packages and artifact repositories
• Conduct internal quality assurance reviews of documentation and evidence
• Identify documentation gaps and coordinate remediation activities
• Support development and maintenance of Plans of Action & Milestones (POA&Ms)
• Ensure documentation aligns with evolving CMMC and NIST guidance

• Attend and actively support customer assessments
• Actively defend implementations and evidence presented to assessors
• Coordinate assessment interviews and technical demonstrations
• Support mock assessments and readiness exercises for customers
• Assist customers in responding to assessor requests and follow-up questions
• Document assessment observations, findings, and remediation actions
• Coordinate post-assessment remediation activities and evidence resubmissions when required
• Serve as a trusted advisor throughout the certification lifecycle

• Conduct SecureITSM’s annual self-assessment activities
• Maintain internal compliance documentation and evidentiary artifacts
• Coordinate annual evidence collection activities (e.g., training certificates, access reviews, vulnerability scans)
• Assist with internal policy and procedure updates
• Support ongoing continuous monitoring and compliance validation activities
• Track changes to CMMC, NIST SP 800-171, and related DoD guidance affecting internal compliance posture

• Maintain and update SecureITSM master implementation statement libraries aligned to NIST SP 800-171 and evolving CMMC guidance
• Develop and maintain industry-specific implementation statement sets (e.g., manufacturing, engineering, professional services, telework-only environments)
• Standardize implementation language and evidence expectations across customer environments
• Coordinate updates to implementation statements based on assessment findings, regulatory changes, and best practices
• Validate implementation statements for technical accuracy, completeness, and assessor defensibility
• Support continuous improvement of SecureITSM’s proprietary documentation platform and implementation content library

• Develop and maintain assessment preparation Standard Operating Procedures (SOPs)
• Continuously improve evidence collection and assessment support workflows
• Create standardized templates, checklists, and assessment playbooks
• Document lessons learned and incorporate process improvements
• Maintain internal knowledge base articles and operational documentation
• Assist in refining SecureITSM’s proprietary CMMC documentation platform workflows and processes

• U.S. Citizenship required
• Detailed understanding of Microsoft Azure, Microsoft Defender, Microsoft Sentinel, Microsoft 365 GCC/GCC High, and related Microsoft security technologies
• 6+ years of cybersecurity experience with strong focus on NIST SP 800-53 and/or NIST SP 800-171
• Experience supporting compliance assessments, audits, or certification activities
• Strong understanding of CMMC assessment methodology and evidence requirements
• Excellent technical writing and communication skills
• Strong project management and organizational abilities
• Exceptional attention to detail
• Ability to manage multiple customer engagements simultaneously
• Experience working directly with external assessors, auditors, or regulatory bodies
• Familiarity with secure project management and compliance collaboration platforms

• PMP certification preferred
• CMMC Certified Professional (CCP) or Certified Assessor (CCA) preferred
• CISSP, CISM, or equivalent cybersecurity certification preferred
• Experience supporting DoD contractors or working within the Defense Industrial Base (DIB)
• Familiarity with FedRAMP and DFARS 252.204-7012
• Experience with SIEM, vulnerability management, and endpoint protection technologies

• Strong leadership and customer engagement skills
• Ability to remain composed and professional during high-pressure assessment activities
• Analytical thinker with strong problem-solving capabilities
• Self-motivated with ability to work independently
• Collaborative team player with strong interpersonal skills
• High level of integrity and professionalism ​​​​​​​

Powered by JazzHR

0mriC7k8Mc

Paragone Solutions, Inc. is a boutique provider of services to the Department of Defense. We are process-oriented (i.e. ISO 9001 certified) services company that provides cybersecurity, IT training, and industrial health/occupational safety support services. Founded in 2008, we are a certified woman-owned small business and a SBA certified 8(a) firm. Paragone offers competitive salaries and a relaxed, life-friendly work environment.