Remote Security Control Assessor Jobs in Frederick, MD

As a CMMC Certified Assessor (CCA) and part of the assessment team you’ll work with Defense Industry Based (DIB) clients serving the Department of Defense (DoD) in both a consultative and assessor role dependent on the type of assessment being performed. You will be part of the KTL team that supports the efforts of our clients to satisfy the Cybersecurity Maturity Model Certification (CMMC) requirements. As an Authorized CMMC 3 Party Assessment Organization (C3PAO) KTL offers CCA’s two (2) assessment packages for clients. KTL offers consulting and professional services in addition to conducting a readiness or gap assessment of a client to undergo a C3PAO CMMC Assessment. The other assessment service is reserved for clients that do not receive consulting or professional services and wish to have their organization validated and certified to meet CMMC requirements by an authorized C3PAO.

Our support staff, sales team, and technicians all come together to make a difference. We also recognize that you're a person with life beyond work, that's why we invest in these meaningful health and welfare benefits:

Health Benefits (Health, Vision, and Dental)

Expense reimbursement

Certification Training reimbursement

401k with company match

Company laptop

Remote, In office, or Hybrid availability

4 weeks of PTO

Quarterly bonuses

Special Note

Due to the lack of CCA’s in the ecosystem at this time KTL understands that candidates may not have the credentials at this moment. Candidates with a CCP and favorable T3 that are capable of attaining the CCA credentials within a one (1) year time frame will be considered.

Location

During the initial 3-6 months the CCA candidate is expected to be in office approximately 3 days a week for training and team building. The CCA role may be in office or hybrid depending on the location of the selected candidate. Occasional or limited travel will vary based on client requirements and company events.

Essential Functions

The CCA/Security and Compliance Analyst assists our clients in the assessment of clients undergoing a CMMC Certification assessment or in meeting key cybersecurity compliance initiatives including NIST SP 800-171 compliance and eventual CMMC certification relating to documentation preparation, readiness, and assessment activities.

Duties and Responsibilities

Participate in readiness or CMMC assessments including the coordination, evaluation of on premises and cloud environments, collection of evidence and artifacts, and documenting results

The role is to act as an assessor per client.

Work collaboratively with internal teams to maintain applied knowledge of NIST SP 800-171, DFARS 252.204-7012, CMMC 2.0, FedRAMP, NIST SP 800-53 and other associated standards and regulations

During assessment down time - Review, develop, update, and/or maintain cyber security documentation which may include policies, procedures, documentation, and checklists

During assessment down time - Assist in the preparation of managed client customers preparing for eventual CMMC certification.

Other duties as assigned

Requirements

Demonstrated understanding of NIST SP.800-171, NIST SP.800-171A, NIST SP.800-53, NIST SP.800-53A, FedRAMP and/or other similar federal government regulations and industry standards

US Citizenship with the ability to pass a background check

Strong interpersonal communication skills and curiosity to continuously learn

Excellent organizational skills with ability to prioritize project work loads

Proficient in Microsoft Office Online/Microsoft 365 (Word, PowerPoint, Excel, Outlook)

Creative and innovative thinking, problem solving and analytical skills

Possess strong customer service skills and customer-focused mindset

Must maintain a high degree of integrity, confidentiality, and privacy

Working understanding of IT and Infrastructure acronyms and definitions

Preferred background

CMMC Certified Professional (CCP) with a favorable T3 background check

CMMC Certified Assessor (CCA). Highly qualified candidates who do not possess this certification may be considered - they must be able to obtain certification within one (1) year of hire

Bachelor’s degree in information technology, communications, or related fields with 2+ years of relevant experience, or a combination of industry certifications (e.g. – Security+, A+, Network+, or various Microsoft Cloud certifications) and experience that equates to that knowledge

Experience with technical, procedure, and policy writing

KTL Solutions Systems is an equal opportunity/ affirmative action employer and an alcohol and drug free workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status