CMMC / NIST Consultant / Analyst at Hotman Group, LLC | Torre

CMMC / NIST Consultant / Analyst

You'll secure critical client operations by expertly navigating CMMC, NIST, and FedRAMP compliance.
Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Freelance
Recurrent
Provide your expected compensation while applying
location_on
Remote (for United States residents)
skeleton-gauges
You have opted out of job matches in .
To undo this, go to the 'Skills and Interests' section of your preferences.
Review preferences
Shared by
Emma of Torre.ai
20 days ago

Requirements and responsibilities


About the roleHotman Group is seeking a CMMC / NIST Consultant / Analyst to support client projects involving CMMC, SSP development, NIST SP 800-171, NIST SP 800-53, FedRAMP, evidence collection, control documentation, and remediation tracking.This is a contract role that may be structured as part-time or full-time based on project needs and candidate availability. We are looking for a mid-level practitioner who can contribute to active client delivery work, produce strong documentation, and help move projects forward in a remote consulting environment.What You’ll DoSupport client engagements related to CMMC readiness, implementation, and documentationDevelop, update, and maintain System Security Plans (SSPs)Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverablesGather, organize, and review evidence supporting control implementationDraft and refine control narratives, policies, procedures, and related compliance documentationIdentify gaps and support development of POA&Ms and remediation trackingWork with client stakeholders to collect information, validate details, and keep deliverables movingContribute to readiness efforts tied to assessments, documentation, and ongoing compliance activitiesWhat we’re looking for3-5 years of relevant experience in GRC, cybersecurity compliance, or related consulting workHands-on experience with CMMC-related work (Required)Experience working with SSPs, policies, procedures, evidence collection, and remediation documentation (Required)Familiarity with NIST SP 800-171, NIST SP 800-53, and FedRAMPStrong writing and documentation skillsAbility to work independently in a remote environmentStrong organization, follow-through, and professionalism in client-facing workComfort stepping into active projects and supporting delivery work with minimal hand-holdingNice to HaveExperience supporting CMMC Level 2 effortsExperience with CUI scoping, enclaves, or boundary discussionsFamiliarity with POA&Ms, assessment readiness, and control crosswalksCertifications such as CCP, CCA, CISSP, CISM, or CISARequirementsAuthorized to work in the U.S. with permanent work authorizationAble to pass a background checkReliable high-speed internet and a secure remote work setupAbout Hotman GroupHotman Group is a remote boutique cybersecurity and GRC firm supporting clients across a range of industries and compliance needs. We value strong writing, quality work, collaboration, sound judgment, and practical execution.This role is a strong fit for someone who wants to contribute to meaningful CMMC project work in a contract capacity, whether that means part-time project support or full-time contract availability.
Optionally, you can add more information later (benefits, pre-screening questions, etc.)
check_circle

Payment confirmed

A member of the Torre team will contact you shortly

In the meantime, continue adding information to your job opening.