CMMC Level 2 Compliance Specialist/Consultant

-

About the Company

We are a U.S.-based commercial flooring contractor that provides end-to-end flooring solutions for corporate, healthcare, education, and government projects. The company manages the full project lifecycle—from planning and material sourcing to installation—ensuring high-quality results delivered on time and within budget.

Role Summary

The CMMC Level 2 Compliance Specialist / Consultant will help the company evaluate its existing cybersecurity controls, complete the required Level 2 self-assessment, document assessment findings, and identify gaps that need to be addressed.

-

Key Responsibilities

-Review CMMC Level 2 requirements and assess the company's existing cybersecurity practices and controls.

-Conduct or support the CMMC Level 2 self-assessment, including evaluating applicable security requirements and completing assessment scoring.

-Gather and review supporting evidence to determine whether security requirements are being met.

-Identify compliance gaps, assess areas requiring improvement, and recommend appropriate corrective actions.

-Document assessment results, findings, and supporting evidence in accordance with applicable requirements.

-Advise on cybersecurity policies, procedures, access controls, and technical safeguards needed to address identified gaps.

-Coordinate with the company's existing IT provider or other relevant stakeholders to understand the current environment and implement necessary improvements, as agreed.

-Provide clear guidance on outstanding requirements, remediation priorities, and recommended next steps toward compliance.

-Explain the assessment results and recommendations in a clear, practical manner to company leadership.

Requirements

-Experience: Demonstrated hands-on experience with CMMC Level 2 self-assessments, CMMC compliance, or implementation of the relevant security requirements.

-Technical Knowledge: Strong understanding of NIST SP 800-171 and the cybersecurity controls applicable to CMMC Level 2.

-Assessment & Documentation: Experience evaluating security controls, reviewing supporting evidence, completing assessment scoring, documenting findings, and identifying compliance gaps.

-Remediation: Ability to recommend practical corrective actions and advise organizations on addressing cybersecurity compliance deficiencies.

-Cybersecurity Background: Working knowledge of IT security controls, access management, system security, and related cybersecurity practices.

-Independence: Ability to manage the assessment process with minimal supervision and communicate progress, risks, and outstanding requirements.

-Communication: Strong written and verbal English communication skills, with the ability to explain technical compliance matters clearly.

Preferred Qualifications

-Experience supporting U.S. Department of Defense contractors or subcontractors with CMMC compliance.

-Experience preparing organizations for formal CMMC Level 2 third-party assessments.

-Relevant cybersecurity, information security, or CMMC professional credentials, where applicable.

Engagement Details

-Scope: CMMC Level 2 self-assessment and compliance gap evaluation, with remediation guidance as needed.

-Timeline: Immediate availability preferred due to an urgent government contract requirement.

-Engagement Type: Flexible; project-based consulting or another suitable arrangement will be discussed based on the candidate's experience and the client's needs.

-Compensation: To be discussed based on qualifications, proposed scope, timeline, and engagement structure.