ZipRecruiter

Log In

1

Contract Cmmc Assessor Jobs (NOW HIRING)

The Armor Group

CMMC Compliance Manager

Mason, OH · On-site

This is a leadership role that sits at the intersection of IT, legal, contracts, operations, and ... They are the primary point of accountability when a C3PAO assessor walks in the door. Key ...

Red Cup IT

CMMC Security Engineer

The role involves designing security controls, leading vulnerability assessments, supporting ... contracts is highly valued. Company : Red Cup IT is an enterprise-grade Cybersecurity & IT firm ...

Red Cup IT, Inc.

CMMC Security Engineer

Los Angeles, CA · On-site +1

Lead vulnerability assessments, scan remediation tracking, and continuous risk management across ... Experience supporting DoD compliance or federal contracts is highly valued. Job Purpose The role ...

Red Cup IT Inc

CMMC Security Engineer

Los Angeles, CA · On-site +1

Lead vulnerability assessments, scan remediation tracking, and continuous risk management across ... Experience supporting DoD compliance or federal contracts is highly valued. Job Purpose The role ...

Brasfield & Gorrie, LLC

CMMC Compliance Lead

Birmingham, AL · On-site

$147K/yr

Maintain and administer the CMMC assessment inventory log, including systems, assets, control ... Review contracts and client requirements related to federal cybersecurity compliance * Assist in ...

Brasfield & Gorrie, LLC

CMMC Compliance Lead

Birmingham, AL · Hybrid

$147K/yr

Maintain and administer the CMMC assessment inventory log, including systems, assets, control ... Review contracts and client requirements related to federal cybersecurity compliance * Assist in ...

PCL Construction

CMMC Compliance Manager

Arvada, CO · On-site

... contracts, operations, and other stakeholders to drive delivery, timelines, evidence collection, and issue resolution. Owns CMMC readiness and assessment preparation, including boundary definition ...

PCL Construction

CMMC Compliance Manager

Arvada, CO · On-site

... contracts, operations, and other stakeholders to drive delivery, timelines, evidence collection, and issue resolution. • Owns CMMC readiness and assessment preparation, including boundary ...

next page

Showing results 1-20

All Jobsfreelance JobsContract Cmmc Assessor Jobs

Contract Cmmc Assessor information

See salary details

$32.5K

$75.3K

$125.5K

How much do contract cmmc assessor jobs pay per year?

As of Aug 25, 2026, the average yearly pay for contract cmmc assessor in the United States is $75,259.00, according to ZipRecruiter salary data. Most workers in this role earn between $46,000.00 and $97,000.00 per year, depending on experience, location, and employer.

What is a contract CMMC assessor?

Contract CMMC Assessors are professionals authorized to evaluate an organization's compliance with the Cybersecurity Maturity Model Certification (CMMC) requirements. They work as third-party assessors, often contracted by organizations seeking certification to handle sensitive information for the U.S. Department of Defense. These assessors review security practices, processes, and documentation to ensure that companies meet the necessary CMMC level. Their role is crucial for businesses aiming to secure defense contracts, as passing a CMMC assessment is often mandatory. Assessors must be certified by the CMMC Accreditation Body and operate according to strict ethical and procedural standards.

What are the key skills and qualifications needed to thrive as a contract CMMC assessor?

To thrive as a Contract CMMC Assessor, you need a thorough understanding of cybersecurity frameworks, risk management, and compliance requirements, typically demonstrated by relevant certifications such as CMMC Provisional Assessor or Certified CMMC Professional. Familiarity with assessment management tools, NIST SP 800-171, and documentation review systems is essential. Strong analytical thinking, attention to detail, and effective communication skills help convey findings and collaborate with clients. These skills and qualifications are crucial to ensure organizations meet CMMC standards and maintain eligibility for defense contracts.

What are some common challenges faced by contract CMMC assessors during the assessment process?

Contract CMMC Assessors often encounter challenges such as varying levels of cybersecurity maturity among clients, incomplete or inconsistent documentation, and tight project deadlines. Navigating complex IT environments and staying updated with frequently evolving CMMC requirements can also add to the complexity. Effective communication and collaboration with client IT and compliance teams are essential to clarify requirements and ensure a smooth assessment process. Assessors must be adaptable and detail-oriented, as each assessment may present unique technical and organizational hurdles.

What is the difference between Contract Cmmc Assessor vs Contract Cmmc Auditor?

AspectContract Cmmc AssessorContract Cmmc Auditor
CertificationsCertified CMMC Professional (CCP), CMMC-AB certificationsSame certifications as assessor, often including CMMC-AB credentials
Work EnvironmentConducts assessments at client sites or remotely, focusing on compliance evaluationReviews assessment reports, audits processes, and verifies compliance documentation
Employer & Industry UsagePrimarily in defense and government contracting sectorsUsed in similar sectors, often overlapping with assessors in compliance roles

Contract Cmmc Assessors and Contract Cmmc Auditors both work within the cybersecurity compliance field, often sharing certifications and industry environments. Assessors perform on-site evaluations, while auditors review documentation and reports. Both roles are essential for maintaining CMMC standards in defense contracting.

More about Contract Cmmc Assessor jobs

What cities are hiring for Contract Cmmc Assessor jobs?

Cities with the most Contract Cmmc Assessor job openings:

What are the most commonly searched types of Cmmc Assessor jobs?

The most popular types of Cmmc Assessor jobs are:

What states have the most Contract Cmmc Assessor jobs?

States with the most job openings for Contract Cmmc Assessor jobs include:

What job categories do people searching Contract Cmmc Assessor jobs look for?

The top searched job categories for Contract Cmmc Assessor jobs are:

Contract Cmmc Assessor jobs near you
Infographic showing various Contract Cmmc Assessor job openings in the United States as of August 2026, with employment types broken down into 73% Full Time, 24% Part Time, 1% Temporary, and 2% Contract. Highlights an 70% Physical, 2% Hybrid, and 28% Remote job distribution, with an average salary of $75,259 per year, or $36.2 per hour.

CMMC Compliance Manager

The Armor Group, Inc.

Mason, OH • On-site

Full-time

Re-posted 3 days ago

Job description

Position Summary
The Compliance Manager is the organizational owner of the company’s regulatory compliance program, with primary accountability for achieving and maintaining Cybersecurity Maturity Model Certification (CMMC), ensuring alignment with NIST SP 800-171 and applicable DFARS clauses, and managing the identification and tracking of CUI-related contractual obligations across the business.
This is a leadership role that sits at the intersection of IT, legal, contracts, operations, and executive management. The Compliance Manager does not just track requirements — they drive the organization’s compliance posture, build a culture of security awareness, and ensure the company is audit-ready at all times. They are the primary point of accountability when a C3PAO assessor walks in the door.
Key Responsibilities:
Compliance Program Ownership
  • Own and continuously improve the organization’s end-to-end compliance program encompassing CMMC, NIST SP 800-171, DFARS 252.204-7012/7019/7020/7021, and related federal regulations
  • Develop, maintain, and enforce the organization’s information security policies, standards, and procedures; ensure they are reviewed at least annually and updated in response to regulatory changes
  • Maintain the System Security Plan (SSP), Plan of Action amp; Milestones (POA amp;M), and all supporting compliance artifacts; ensure they are current, accurate, and audit-ready at all times
  • Own the organization’s risk register; conduct periodic risk assessments and drive remediation planning in partnership with IT and operational leadership
  • Track CMMC rulemaking, NIST guidance updates, and DoD policy changes; brief leadership on implications and required organizational responses
  • Establish and report on compliance program metrics and key performance indicators (KPIs) to senior leadership on a regular cadence
CMMC Assessment Readiness
  • Lead all activities related to preparation for and completion of CMMC third-party assessments (C3PAO); serve as the organization’s primary point of contact with assessors
  • Conduct and document internal gap assessments against NIST SP 800-171 and CMMC practice requirements; maintain evidence packages for all 110 practices
  • Coordinate with IT to ensure that technical controls are implemented, documented, and generating the evidence required for a successful assessment
  • Manage the POA amp;M lifecycle: identify gaps, assign remediation owners, set milestone dates, track progress, and verify closure
  • Prepare staff for assessor interviews; conduct mock assessments and tabletop exercises to identify weaknesses before formal assessment
  • Maintain post-assessment continuous compliance, ensuring controls do not degrade between certification cycles
CUI Program Management
  • Define, document, and maintain the organization’s CUI scope: categories of CUI handled, all roles and individuals who access CUI, and all systems and locations where CUI is stored, processed, or transmitted
  • Maintain the assessment boundary documentation and data flow diagrams in coordination with IT
  • Develop and enforce CUI handling procedures, marking standards, and destruction requirements across all departments
  • Conduct periodic CUI audits to verify that staff are handling and marking CUI correctly in both digital and physical form
  • Serve as the internal resource for CUI classification questions from program managers, engineers, procurement, and other staff
Preferred Education amp; Certification(s):
  • Bachelor's Degree, preferably in Cybersecurity, Information Technology or similar field
  • Certified CMMC Professional (CCP)
  • Certified CMMC Assessor (CCA)
  • Project Management Professional (PMP)
  • Certified Authorization Professional (CAP / CGRC)

Apply