Senior Consultant, CMMC Cybersecurity Assessor

Forvis Mazars, LLP
United States, Virginia, Tysons
1410 Spring Hill Road (Show on map)
Aug 20, 2025
General information Name Senior Consultant, CMMC Cybersecurity Assessor Posting Title Senior Consultant, CMMC Cybersecurity Assessor Ref # 2235585 Date Published Wednesday, August 13, 2025 City Charlotte State North Carolina Country United States Job Category Risk Advisory Advertised Location US-FL-Tampa Bay, US-GA-Atlanta, US-NC-Charlotte, US-TX-Dallas, US-VA-Tysons Working time Full Time Description & Requirements The IT Risk & Compliance team helps organizations manage IT governance, cybersecurity, and regulatory compliance across industries. With expertise in frameworks like CMMC, NIST, and ISO 27001, they offer services including IT audits, risk assessments, ransomware simulations, and control testing. Their tailored strategies ensure data security, regulatory alignment, and operational continuity-empowering clients to navigate today's complex digital risk landscape with confidence. What You Will Do: Support cybersecurity assessments by following government and industry standards like CMMC, NIST 800-171, NIST 800-53, and FedRAMP/StateRAMP. Review IT systems to identify security issues or compliance gaps. Document findings and recommend practical solutions. Assist with assessments based on NIST 800-171 to prepare for CMMC Level 2 certification. Collaborate with team members and clients across industries on cybersecurity projects. Contribute to defining system boundaries to determine which parts of the IT environment are in scope for compliance. Draft and maintain documentation such as security plans, policies, procedures, and action plans. Participate in designing tools, workflows, and processes that meet compliance needs and reduce risk. Coordinate tasks across multiple projects to ensure deadlines and budgets are met. Minimum Qualifications: Associate's Degree in Cybersecurity, Management Information Systems (MIS), Computer Science, or a related field; or a minimum of six years of relevant experience. 2+ years of relevant experience in cybersecurity, IT audit, or governance, risk, and compliance Experience providing consulting, assessment, or implementation services associated with federal cyber compliance frameworks Working knowledge of cyber risk management frameworks (CMMC / NIST 800-171, FISMA, FedRAMP, NIST Cybersecurity Framework, NIST SP 800-53) General knowledge of common compliance frameworks (PCI DSS, ISO 27001, HIPAA/HITRUST) Proficiency in Microsoft Office Suite Preferred Qualifications: Bachelor's Degree in Cybersecurity, MIS, Computer Science, or a relevant field Professional services or consulting experience CMMC Certified Assessor (CCA) credential Current and valid cybersecurity and/or privacy-related certification(s), including but not limited to the following: CISSP, CISA, CISM, QSA, and CIPP #LI-TPA, #LI-ATL, #LI-CLTSP, #LI-DFW, #LI-TYS #LI-GM1