Remote Risk Control Consultant Jobs in Chicago, IL

CMMCConsultant

Reportsto:vCISO

Status:Regular,Full-Time,Exempt

Location:Remote,CentralTimeZoneRequired

POSITIONSUMMARY: The focus of the CMMC Consultant is to build and maintain strategic relationships with client stakeholders while guiding defense contractors and regulated organizations through cybersecurity compliance and assessment readiness initiatives. This position is responsible for evaluating current security practices, identifying compliance gaps, and driving the implementation of cybersecurity and compliance strategies that align with client business objectives and regulatory requirements.

The CMMC Consultant is fully accountable for providing compliance expertise and strategic guidance by working collaboratively with the FIT team and clients to develop, implement, and mature cybersecurity programs that support Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, Secure Controls Framework (SCF), and other applicable regulatory frameworks. This role will facilitate compliance readiness efforts, assist with remediation planning, and help clients establish sustainable security practices that improve organizational resilience and assessment outcomes.

The CMMC Consultant will review security control implementation, documentation, resource utilization, and project progress to support clients efficiently while ensuring timelines, deliverables, and compliance objectives remain on track. This role requires strong consulting, communication, and organizational skills, with the ability to translate complex cybersecurity and compliance requirements into practical business solutions.

ABOUTFITSOLUTIONS

FIT Solutions is an innovative national IT Services firm, and we are growing every day. We are focused on creating a culture of elite raving fans for our employees that solves business problems for our clients. We are on a mission to impact the lives touched by technology. We teach and promote individuals to set and achieve their personal, professional, and financial goals through the work we do together. Measuring results against best-in-class businesses, we are focused on hitting targets. We are a humble and adaptable group of people who continue to train, and role play daily in pursuit of our goals. We are a great fit for team members that are aligned and thrive in a fast-paced, results driven environment.

PRIMARYOBJECTIVES

• Leadmockassessments,readinessreviews,andevidencevalidationactivities to ensure organizations are prepared for formal compliance assessments, maintainingauditreadinessscoresof80%orhigher.
• Develop,maintain,andsupportcompliancedocumentation,includingSystemSecurityPlans(SSPs),PlansofAction&Milestones(POA&Ms),policies,procedures,andotherrequiredartifacts,ensuringmilestones and deliverables are completed on time.
• DriveapositiveclientexperiencebyachievingandmaintainingtargetCustomer Satisfaction (CSAT) scores asmeasuredthroughprojectsurveyfeedback.

SECONDARYOBJECTIVES

• Buildandmaintaintrustedadvisorrelationshipswithclientsthroughouttheircompliancereadinessjourney.
• GuidedefensecontractorsandregulatedorganizationsinachievingandmaintainingCMMCcomplianceandassessmentreadiness.
• Conduct cybersecurity and compliance gap assessments against CMMC, NIST SP 800-171, and related frameworks.
• Assist clients in identifying, protecting, and managing Controlled Unclassified Information (CUI) within their environments.
• Develop and support remediation strategies, corrective action plans, and compliance roadmaps to address identified gaps.
• Collaborate with internal and client technical teams to validate security control implementation and ensure compliance requirements are effectively met.
• Translate complex regulatory and cybersecurity requirements into practical, actionable business and technical guidance.

COMPETENCIES

Cybersecurity&ComplianceExpertise

• Demonstrates knowledge of CMMC, NIST SP 800-171, NIST Cybersecurity Framework (CSF), Secure Controls Framework (SCF), and related cybersecurity regulations. Applies compliance requirements effectively to support client assessment readiness and risk reduction.

RiskAssessment&AnalyticalThinking

• Evaluates cybersecurity controls, identifies compliance gaps, analyzes risks, and develops practical remediation strategies. Uses sound judgment to prioritize actions and recommend solutions aligned with business and regulatory requirements.

ClientRelationshipManagement

• Builds trusted advisor relationships with clients through professionalism, responsiveness, and credibility. Understands client objectives and delivers solutions that support both compliance and business outcomes.

Consulting&AdvisorySkills

• Provides strategic guidance and recommendations that translate complex cybersecurity and compliance requirements into actionable business and technical solutions. Influences decision-making through expertise and collaboration.

TechnicalAcumen

• Maintains a working knowledge of security technologies, enterprise environments, cloud platforms, identity and access management, endpoint security, and security operations to effectively evaluate and validate control implementation.

Communication&Documentation

• Communicates clearly with technical and non-technical stakeholders. Produces accurate, thorough, and professional documentation, including System Security Plans (SSPs), POA&Ms, policies, procedures, and assessment artifacts.

Project&OrganizationalManagement

• Effectively manages multiple client engagements, priorities, timelines, and deliverables. Demonstrates strong attention to detail while maintaining quality and meeting project objectives.

ContinuousLearning&Adaptability

• Maintains awareness of evolving CMMC requirements, NIST guidance, regulatory changes, and industry best practices. Applies new knowledge to improve client outcomes and enhance service delivery.

EDUCATIONANDEXPERIENCE

• Minimum 10 years of progressive experience in information technology, cybersecurity, risk management, or information security leadership.
• At least 5 years of experience providing strategic security guidance, security program management, compliance oversight, or executive-level cybersecurity leadership.
• At least 1 year of experience conducting CMMC readiness assessments, gap analyses, or compliance consulting aligned with DFARS 252.204-7012/7021 and NIST SP 800-171 requirements.
• Current Cyber AB Registered Practitioner (RP) certification preferred; equivalent cybersecurity compliance certifications considered.
• Experience managing and advising organizations with complex IT environments, including cloud platforms, hybrid infrastructure, outsourced service providers, and integrated business systems.
• Strong knowledge of cybersecurity frameworks and regulatory requirements, such as NIST CSF, CIS Controls, ISO 27001, HIPAA, HITRUST, SOC 2, PCI-DSS, and other applicable standards.
• Healthcare industry experience and knowledge of healthcare regulations, including HIPAA and HITECH, preferred.
• Bachelors degree in Information Security, Cybersecurity, Information Technology, Computer Science, Business Administration, or a related field preferred; Masters degree in Cybersecurity, Information Systems, Business Administration (MBA), or a related discipline strongly preferred.
• RelevantindustrycertificationssuchasCISSP,CISM,CRISC,CGEIT,HCISPP,orequivalentstronglypreferred.
• Demonstrated experience communicating cybersecurity risks, strategies, and recommendations to executive leadership, boards of directors, and key stakeholders.

BENEFITS

FITSolutionshasyourback,andisproudtoofferarichbenefitpackagetoouremployees,including:

• Health,Dental&VisionInsurance(premiumspaidupto99%foremployeecoverage)
• Optionsinclude,PPO,HDHP,HMOandACO
• Multiplecarrieroptions
• FSA(dependentandmedical),HSAoptions(forqualifiedplans)andsupplementalinsuranceoptions
• $10,000employer-paidLifeInsurance&AD&D(employeeshavetheoptiontobuyup)
• Paidholidays
• Paidtimeoff
• Paidsickleave
• Flexiblehybridworkenvironment
• Retirementplan(401K)
• Professionaltraining&developmentopportunities

PHYSICALREQUIREMENTS

• Ability to remain in a stationary position and/or move throughout the workday, including standing, walking, sitting, speaking, and driving for extended periods as needed.
• Abilitytooccasionallyliftand/ormoveupto20pounds.
• Travelrequirements:Upto20%ofthetime.
• Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.

AAP/EEOStatement

FIT Solutions is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.We are committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. We will not tolerate discrimination or harassment based on any of these characteristics.