Related skills
audits fedramp grc ssp cmmc📋 Description
- Own end-to-end CMMC journey and FedRAMP readiness.
- Define and maintain the CMMC boundary across teams.
- Map NIST SP 800-171 to Sword; produce gap analyses.
- Translate gaps into remediation tasks with clear ownership.
- Build SSP, POA&M, and artifacts for assessments.
- Serve as primary interface with C3PAO and assessment teams.
🎯 Requirements
- 5+ years in GRC/compliance/security, with 3+ years on CMMC or FedRAMP
- Experience owning deliverables and remediation in CMMC/FedRAMP
- Strong knowledge of CMMC Level 2, scoping, and CUI handling
- Ability to produce SSPs, POAMs, gap analyses, and control narratives
- Proven ability to communicate compliance requirements to non-technical stakeholders
- Experience with external auditors and assessors, including evidence packaging
🎁 Benefits
- Comprehensive health, dental and vision insurance
- Life and AD&D Insurance
- Equity shares
- Flexible working hours
- Remote-first company
- 401(k)
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to All Other Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!