Skip to main content
Tallo logoTallo logo

Find Jobs

Find Jobs Near You – Available Work in Your Location

Skip to job details
Apply for this opportunity

To apply for this job, you'll continue to an external website or email application.

DigiFlight Inc.

Certified CMMC Assessor

Career Insights for Policy Analyst

See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.

Scorecard

Based on Maryland data

Review key factors to help you decide if this role fits your goals. How is this calculated?

Were these scores useful?

What they do

A Policy Analyst provides expertise on government policy in a particular area. Gathers background information on issues and tracks legislative initiatives. Works with or advises elected officials, non-profit organizations on interest groups involved with the legislative process.

$147,897 / year median in Maryland

+13% projected growth

Explore Career

Job Description

Duties and Responsibilities The Certified CMMC Assessor (CCA) leads formal CMMC assessments and may also support readiness and pre-assessment advisory engagements, provided independence and objectivity are maintained. This role is responsible for assessment leadership, control evaluation, and final compliance determinations, while ensuring adherence to the CMMC Assessment Process (CAP). Readiness & Pre-Assessment Advisory Lead or support readiness reviews and mock assessments Evaluate organizational preparedness for CMMC certification Provide guidance on: Certification boundary definition Control implementation expectations Policy and Procedure development and evaluation Evidence sufficiency and documentation quality Identifyrisks that mayimpactassessment outcomes Ability to understand technical solutions to stratify controlimplantation Minimum Experience 7-10 years of experience in: Cybersecurity IT audit or assessments Risk management and compliance Information security program management 3-5 years in a lead role involving: Assessments, audits, or compliance programs Decision-making authority over control evaluation Required Skills Experience working with or within3PAOs or accredited assessment bodies Familiarity with federal frameworks such as:

Fed
RAMP DFARS 252.204-7012
(Safeguarding) and
DFARS 252.204-7021
(CMMC Requirements) Experience assessing complex environments (cloud, hybrid, MSPs, enclaves) Strong judgment and decision-making authority Deepexpertisein control evaluation and evidence validation Ability to assess ambiguous or partially implemented controls Executive-level communication and stakeholder engagement High ethical standards and professional integrity Considerations Must avoid conflicts of interestin accordance withapplicable CMMC ecosystem expectations