Lead CMMC Assessor (CCA)

About the Role We are seeking an experienced cybersecurity and compliance professional to serve as a Lead CMMC Assessor (CCA), supporting Certified Third-Party Assessment Organizations (C3PAOs) in the execution of CMMC assessments. This role focuses on leading assessment teams through planning, execution, documentation, and reporting phases of CMMC certification assessments, working as an independent contractor representing HelloRache's commitment to professionalism and cybersecurity excellence.

What You'll Do

• Lead assessment teams through all phases of the assessment lifecycle, including planning, scoping validation, evidence review, interviews, testing activities, and reporting.
• Coordinate assessment activities with client stakeholders, C3PAO personnel, and fellow team members.
• Evaluate objective evidence against CMMC requirements and applicable assessment guides.
• Conduct interviews with executive, operational, and technical personnel to validate security implementations.
• Document assessment observations, findings, and evidence in accordance with CMMC methodology and C3PAO requirements.
• Exercise professional judgment in evaluating evidence sufficiency, consistency, and compliance with assessment objectives.
• Provide leadership and mentoring to assessment team members, ensuring high-quality and consistent assessment execution.
• Communicate assessment status, risks, concerns, and results to assessment sponsors, client leadership, and C3PAO representatives.
• Support quality assurance and quality control activities associated with assessment deliverables and reporting.
• Maintain independence, objectivity, and professional conduct throughout all assessment activities.
• When not engaged in CMMC assessments, support cybersecurity consulting engagements, readiness assessments, gap assessments, risk assessments, and related compliance initiatives.
• Assist organizations with CMMC readiness activities, SSP reviews, POA&M development, and remediation planning as needed.

What We're Looking For

• Certified CMMC Assessor (CCA) – Required
• CISSP, CISM, CRISC, CISA, or equivalent cybersecurity certification
• Lead Auditor or formal assessment methodology training preferred

Nice to Have

• Certified CMMC Professional (CCP)
• Lead Auditor or formal assessment methodology training (preferred)

Compensation & Benefits

• Salary: $120,000-$170,000 commensurate with experience