What are the responsibilities and job description for the CMMC CCA Assessor position at Kimmell Cybersecurity CMMC C3PAO?
About Kimmell Cybersecurity:
Kimmell Cybersecurity & Forensic Services (KCFS LLC) is a certified CMMC Third-Party Assessor Organization (C3PAO) headquartered in Northeast Ohio.
We specialize in CMMC assessments, cybersecurity compliance, and regulatory consulting for Department of Defense contractors, manufacturers, and other regulated industries.
As an authorized assessor organization, we help organizations evaluate and strengthen their cybersecurity posture against CMMC and NIST SP 800-171 requirements. Our mission is to provide accurate, professional, and high-integrity assessment services in support of national security and the Defense Industrial Base.
We are known for precision, integrity, professionalism, and a client-first approach in high-assurance environments.
Job Summary:
Kimmell Cybersecurity is seeking a CMMC Assessor to support CMMC assessment activities for clients seeking certification under the Cybersecurity Maturity Model Certification program.
This role is ideal for someone with a strong cybersecurity and compliance background who can support CMMC Level 2 assessment work, review evidence, participate in interviews, document findings, and assist with assessment reporting.
The position requires attention to detail, strong communication skills, professionalism, and the ability to work directly with clients in regulated environments while maintaining C3PAO independence and assessment integrity.
Key Responsibilities:
- Support CMMC Level 2 assessment activities for DoD contractors and regulated organizations
- Review client documentation, SSPs, POA&Ms, policies, procedures, and assessment evidence
- Evaluate alignment with CMMC, NIST SP 800-171, and related cybersecurity requirements
- Participate in assessment planning, interviews, evidence review, and documentation
- Assist with preparing assessment reports, findings, and supporting documentation
- Track evidence, gaps, follow-up items, and assessment status
- Support Lead Assessors and assessment team members during client engagements
- Support ISO/IEC 17020 requirements, including impartiality, confidentiality, competence, assessment documentation, and inspection body procedures
- Maintain C3PAO independence, confidentiality, professionalism, and assessment integrity
- Communicate clearly with clients and internal team members
- Prepare accurate, clear, and organized compliance documentation
Qualifications:
- CMMC CCP certification required or strongly preferred
- CMMC CCA certification preferred
- Experience with CMMC, NIST SP 800-171, DFARS, or cybersecurity compliance
- Understanding of security controls, policies, procedures, and evidence review
- Ability to review SSPs, POA&Ms, policies, procedures, diagrams, inventories, and technical evidence
- Familiarity with ISO/IEC 17020 requirements preferred
- Strong written and verbal communication skills
- Ability to manage multiple client priorities and deadlines
- High level of confidentiality, integrity, and professionalism
- Strong attention to detail and documentation accuracy
- Ability to work independently and as part of an assessment team