McKonly & Asbury C3PAO Cybersecurity Maturity Model Certification (CMMC), Certified CMMC Professional (CCP) and Certified CMMC Assessor (CCA) training and certification.

The Cybersecurity Maturity Model Certification (CMMC)Assessment Team is a critical component of our cybersecurity services, dedicated to ensuring that our clients—including key organizations within the Defense Industrial Base (DIB)—achieve the highest standards of security compliance as defined by the CMMC. All team members are highly trained, certified professionals. Our primary focus is to perform rigorous, impartial CMMC audits and detailed gap analyses that drive immediate certification success for DIB organizations and promote long-term cybersecurity enhancements. Each assessor collaborates closely with clients to deliver clear assessment that identifies what Met and Did Not Meet the CMMC Security Requirements. As an CMMC Third-Party Assessor Organization (C3PAO), we do not provide consulting services on how to implement the NIST 800-171 security. We provide value to our client’s by clearly defining why the security requirement was not met without providing guidance on how to meet the security requirement.

ABOUT THE JOB

CMMC Assessment – Dedicated cybersecurity assessors serve as technical auditors and compliance liaisons for organizations pursuing CMMC certification within the Defense Industrial Base (DIB).• Conduct comprehensive audits that include in-depth documentation reviews, system configuration testing, and interviews to verify that client environments meet all applicable CMMC Level 2 security requirements.• Manage escalation issues by collaborating with the CMMC Assessment Lead to resolve unfamiliar technical challenges and emerging cybersecurity risk areas.• Engage proactively with client IT and security teams to clarify assessment findings, conduct Plan of Action & Milestone (POAM) follow up assessments, ensuring that new or updated security requirements are met.• Coordinate with internal compliance managers and reporting teams to deliver detailed, actionable assessment reports that drive continuous improvement and high stakeholder satisfaction.Staff Work Review – Lead and support the continuous improvement of our CMMC assessment team by overseeing the work of direct reports and Certified CMMC Professionals (CCPs).• Conduct regular performance reviews of assessment reports and documentation produced by subordinates to ensure accuracy, consistency, and adherence to CMMC methodologies and ISO/IEC 17020:2012 standards.• Provide constructive feedback and coaching on technical evaluations, evidence gathering, and report writing to enhance team proficiency and compliance quality.• Collaborate with team members during debriefs and follow-up sessions, addressing any gaps or inconsistencies while promoting a culture of excellence and continuous learning.• Ensure that all subordinate work aligns with our organization’s ISO/IEC 17020:2012 quality standards and supports overall client success in achieving CMMC certification. Professional Development – Invest in continuous learning and skill enhancement to stay current with evolving cybersecurity standards and CMMC requirements. This activity involves participation in Continuing Professional Education (CPE) courses, company-led training sessions, industry webinars, and certification updates.• Enroll in accredited CPE courses and attend industry conferences to broaden technical knowledge and regulatory insight.• Participate in internal training workshops and simulation exercises designed to refine assessment methodologies and enhance team performance.• Pursue advanced certifications and engage in peer networking sessions to share best practices and emerging trends in cybersecurity compliance.• Document and track professional development activities to ensure accountability and support ongoing performance evaluations.

RESPONSIBILITIES

• Conduct comprehensive audits that include in-depth documentation reviews, system configuration testing, and interviews to verify that client environments meet all applicable CMMC Level 2 security requirements.
• Manage escalation issues by collaborating with the CMMC Assessment Lead to resolve unfamiliar technical challenges and emerging cybersecurity risk areas.
• Engage proactively with client IT and security teams to clarify assessment findings, conduct Plan of Action & Milestone (POAM) follow up assessments, ensuring that new or updated security requirements are met.
• Coordinate with internal compliance managers and reporting teams to deliver detailed, actionable assessment reports that drive continuous improvement and high stakeholder satisfaction.
• Conduct regular performance reviews of assessment reports and documentation produced by subordinates to ensure accuracy, consistency, and adherence to CMMC methodologies and ISO/IEC 17020:2012 standards.
• Provide constructive feedback and coaching on technical evaluations, evidence gathering, and report writing to enhance team proficiency and compliance quality.
• Collaborate with team members during debriefs and follow-up sessions, addressing any gaps or inconsistencies while promoting a culture of excellence and continuous learning.
• Ensure that all subordinate work aligns with our organization’s ISO/IEC 17020:2012 quality standards and supports overall client success in achieving CMMC certification.
• Enroll in accredited CPE courses and attend industry conferences to broaden technical knowledge and regulatory insight.
• Participate in internal training workshops and simulation exercises designed to refine assessment methodologies and enhance team performance.
• Pursue advanced certifications and engage in peer networking sessions to share best practices and emerging trends in cybersecurity compliance.
• Document and track professional development activities to ensure accountability and support ongoing performance evaluations.

QUALIFICATIONS

• Highly trained, certified professionals in cybersecurity.
• Ability to perform rigorous, impartial CMMC audits and detailed gap analyses.
• Experience in coordinating with internal compliance managers and reporting teams.
• Proficiency in adhering to CMMC methodologies and ISO/IEC 17020:2012 standards.
• Capability to provide constructive feedback and coaching.
• Commitment to continuous learning and skill enhancement in cybersecurity standards and CMMC requirements.

OTHER

N/A