CMMC Program Assistant

Emerson Construction Company is seeking a highly organized and detail-oriented CMMC Program Assistant to help maintain the company's Cybersecurity Maturity Model Certification (CMMC) compliance program. This position serves as the central operator for cybersecurity compliance activities, ensuring ongoing adherence to CMMC Level 2 and NIST SP 800-171 requirements. The successful candidate will work across departments to help maintain documentation and assessment evidence, assist with internal and external audits, support remediation efforts, and coordinate compliance-related activities to ensure audit readiness. This role focuses on documentation, compliance, and program support rather than hands-on technical administration.

Essential Duties and Responsibilities

Program Compliance

• Monitor compliance status against NIST SP 800-171 requirements.
• Assist with maintaining the System Security Plan (SSP).
• Help track the Plan of Action and Milestones (POA&M).
• Assist with the coordination of cybersecurity policy and procedure reviews.

Evidence and Documentation Management

• Collect, organize, and maintain compliance evidence.
• Manage evidence repositories and ensure documentation remains current and audit-ready.
• Assist with coordination of evidence collection activities across departments.
• Validate ownership and accountability for required documentation.
• Periodic evidence review and refresh cycles.

Accountability and Remediation Tracking

• Maintain compliance tasks and remediation trackers.
• Track POA&M activities through completion.
• Escalate overdue items and compliance risks to the IT Administrator.
• Ensure timely closure of audit findings and remediation efforts.

Assessment and Audit Preparation

• Maintain compliance tasks and remediation trackers.
• Track POA&M activities through completion.
• Escalate overdue items and compliance risks to the IT Administrator.
• Ensure timely closure of audit findings and remediation efforts.

Continuous Monitoring

• Track vulnerability remediation efforts and compliance metrics.
• Ensure recurring compliance requirements are completed on schedule.
• Vendor and third Party Compliance/Support vendor risk management activities.

Qualifications/Experience

• Some experience in cybersecurity compliance, governance, risk management, auditing, quality management, or related disciplines.
• Experience managing documentation-intensive programs.
• Strong organizational, communication, and accountability management skills.
• Experience supporting CMMC Level 2 compliance efforts.
• Familiarity with NIST SP 800-171 requirements.
• Experience supporting federal compliance programs.
• Experience managing audit evidence repositories and assessment activities.

Preferred Certification

• Certified CMMC Professional (CCP)
• Certified Information Systems Security Professional (CISSP)

Additional Valuable Certifications

• Certified Internal Auditor (CIA)
• Certified Compliance & Ethics Professional (CCEP)
• CompTIA Security

Key Competencies

• Documentation management
• Audit preparation
• Organizational accountability
• Communication and relationship management
• Attention to detail
• Problem-solving and continuous improvement