Associate Compliance Consultant

The objective of our program is to ensure participants are equipped with the skills to support mapping data flows for FCI/CUI, assist in defining system scope (people, processes, technology) for assessments, support readiness assessments against NIST SP 800-171/CMMC L1–L2, collect artifacts, log gaps and actions in POA&Ms, draft and update sections of System Security Plans (SSPs), policies, procedures, and diagrams using C3 templates, organize client evidence in approved repositories, keep versioning and status current, schedule/record working sessions, capture meeting notes, actions, and owners, follow up on actions to keep timelines on track, reach out to team members with questions, escalate risks and blockers promptly, use project/ticket tools (e.g., Asana/ConnectWise), GRC platforms (e.g., FutureFeed/Hudu), MS 365, and Copilot to keep work visible and auditable, apply C3 formatting and naming standards, and ensure deliverables are clear, complete, and client-ready.

ABOUT THE JOB

The Associate Compliance Consultant supports C3 Integrated Solutions’ government-contractor clients as they build and maintain compliant, secure environments. In this associate role, you’ll assist with governance, risk, and compliance (GRC) tasks across frameworks such as CMMC, DFARS/NIST SP 800-171, and related U.S. Government requirements, working alongside client stakeholders and MSP partners. You’ll help gather evidence, draft documents, track remediation items, and keep engagements organized and on schedule.

RESPONSIBILITIES✨

• Support mapping data flows for FCI/CUI.
• Assist in defining system scope (people, processes, technology) for assessments.
• Support readiness assessments against NIST SP 800-171/CMMC L1–L2.
• Collect artifacts, log gaps and actions in POA&Ms.
• Draft and update sections of System Security Plans (SSPs), policies, procedures, and diagrams using C3 templates.
• Organize client evidence in approved repositories.
• Keep versioning and status current, schedule/record working sessions.
• Capture meeting notes, actions, and owners.
• Follow up on actions to keep timelines on track.
• Reach out to team members with questions.
• Escalate risks and blockers promptly.
• Use project/ticket tools (e.g., Asana/ConnectWise), GRC platforms (e.g., FutureFeed/Hudu), MS 365, and Copilot.

QUALIFICATIONS✨

• Ability to support mapping data flows for FCI/CUI.
• Skills in defining system scope for assessments.
• Capability to support readiness assessments against NIST SP 800-171/CMMC L1–L2.
• Experience in collecting artifacts and logging gaps and actions in POA&Ms.
• Proficiency in drafting and updating SSPs, policies, procedures, and diagrams using templates.
• Familiarity with organizing client evidence in approved repositories and keeping versioning and status current.
• Skill in using project/ticket tools like Asana/ConnectWise, GRC platforms like FutureFeed/Hudu, and MS 365.

OTHER

Remote