International Cmmc Certified Professional

**COMPANY PROFILE**
Insight Assurance is a security and compliance firm trusted by over 1200 organizations for their SOC 2, PCI DSS, ISO 27001, and HIPAA audit needs. Insight Assurance is a licensed CPA firm, PCI Qualified Security Assessor (QSA), and ISO 27001 Certification Body founded by former Big-4 professionals (Former EY) looking to simplify the world of IT compliance.

**JOB PURPOSE**

**DUTIES AND RESPONSIBILITIES**
- Assessment Planning: Develop a comprehensive assessment plan outlining the scope, objectives, and methodology for evaluating the organization's cybersecurity practices and controls.
- Evaluate Compliance: Assess the organization's adherence to the CMMC framework by reviewing policies, procedures, and technical security controls to ensure they meet the required maturity level.
- Data Collection: Gather and analyze relevant documentation, including system configurations, security policies, incident response plans, and training materials.
- Conduct Interviews: Engage with key personnel within the organization to understand the implementation of cybersecurity practices and gauge their familiarity with security protocols.
- Risk Assessment: Identify potential risks and vulnerabilities in the organization's cybersecurity posture, determining their potential impact on safeguarding governmental data.
- Reporting Findings: Create detailed reports that document assessment findings, highlighting areas of compliance and non-compliance, along with recommendations for improvement.
- Provide Guidance: Offer expert advice and best practices to help organizations enhance their cybersecurity measures and achieve compliance with CMMC requirements.
- Follow-Up Assessments: Conduct follow-up assessments to verify that corrective actions have been implemented, and that the organization is on track to achieve or maintain compliance.
- Continuous Learning: Stay updated on changes in the CMMC framework, cybersecurity threats, and mitigation strategies to provide the most relevant and effective assessments.
- Client Interaction: Maintain clear communication with clients throughout the assessment process to ensure understanding and facilitate collaboration.

**SPECIFIC DUTIES**
- Assist the Lead assessor in gathering and evaluating assessment evidence.
- Evaluates the design and effectiveness of controls.
- Identifies and communicates preliminary assessment findings for daily checkpoint meetings.
- Foster stakeholder relationships through proactive communication with clients, colleagues and partners.
- Proactively communicate with management regarding any potential issues.

**QUALIFICATIONS**

**SKILLS**
- Excellent oral and written communication skills.
- Ability to work individually as well as collaboratively.
- A high degree of motivation.
- Fluency in English is required.

**EDUCATION** Bachelor's degree in accounting, business, cyber security, or management information systems.

**EXPERIENCE**
At least 1-3 years of experience performing IT audit engagements at a Big 4 or other audit/consulting firm. Experience using GRC and compliance automation tools (Vanta, Drata, SecureFrame) is a plus.

**TRAINING AND CERTIFICATIONS**
- (ISC)2 CGRC/CAP
- CompTIA CASP+
- CompTIA Cloud+
- CompTIA PenTest+
- CompTIA Security+
- GIAC GSEC

**BENEFITS**
- Flexible Paid Time Off and paid Holidays
- Quarterly Performance Bonuses
- 100% Remote
- Competitive salary and benefits package.
- Opportunities for professional growth and development.
- Collaborative and innovative work environment.

Insight Assurance is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
- NATO Country Listing:

- Australia
- Barbados
- Belgium
- British Virgin Islands
- Canada
- Croatia
- Czech Republic
- Denmark
- Estonia
- Finland
- France
- Germany
- Greece
- Hungary
- Iceland
- Italy
- Latvia
- Lithuania
- Luxembourg
- Montenegro
- Netherlands
- Norway
- Poland
- Portugal
- Romania
- Slovakia
- Slovenia
- South Korea
- Spain
- Sweden
- Turkey
- US Virgin Islands
- United Kingdom
- United States

**Privacy Notice CCPA**:

- Insight Assurance shares your personal data/information with Greenhouse recruiting because this is the tool we use for the recruitment process. _
- Insight Assurance does not sell personal data/information under any circumstances. _

**Privacy Notice GDPR**:

- We are a U.S. based company, hence some or all Personal Data pertaining to you will be hosted in the U.S._
- The categories of Personal Data under Processing consist of:_
- _Identification_
- _Contact_
- _Education and Professional_
- _Interview performance_
- _Evaluation_
- You may exercise several Rights as determined under applicable Personal Data Protection legislation, in short:_
- **_Right of Access_**_ - meaning getting information about the Personal Data under Processing by us, except for the information you already know;_
- **_Right of Erasure_**_ - you may ask for us to erase all Persona