Certified CMMC Professional - On Site (Columbia, MD)

Description

COMSO, Inc. is a powerhouse when it comes to empowering federal government stakeholders to fulfill their mission with confidence and efficiency. Our staff brings knowledgeable IT systems expertise, software development proficiency, innovative learning solutions for workforce development, and exceptional operations and production support. We were founded in 1988, and remain a recognized woman owned small business, operating in several states including Maryland, Georgia, Hawaii, Texas, and Alaska. We are honored to be recognized as a Top Workplace for eight years running by the Baltimore Sun Media Group. 

Currently, we are seeking a Senior Systems Administrator to join our Team! This position will work with COMSO’s Managed Security Service Provider.

 Key Responsibilities

• Support CMMC readiness and compliance activities in accordance with current CMMC requirements.
• Review organizational environments against applicable CMMC Level 1 and Level 2 security requirements.
• Assist with evaluating the implementation of NIST SP 800-171 security requirements.
• Conduct gap analyses and identify areas requiring remediation.
• Assist with the development and maintenance of System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, and supporting evidence.
• Review technical and administrative controls and associated documentation for compliance.
• Assist organizations with identifying and documenting the handling, storage, processing, and transmission of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
• Work with technical teams and business stakeholders to collect and validate evidence supporting CMMC requirements.
• Track remediation activities and provide recommendations for addressing identified compliance gaps.
• Support preparation for CMMC assessments and coordinate with internal stakeholders, consultants, and assessment organizations as required.
• Stay current on changes to CMMC, NIST SP 800-171, and related DoD cybersecurity requirements.

Additional Responsibilities:

• Internal Auditing: Assists with recurring audits to flag operational anomalies or policy violations before external investigators do.
• Policy Creation: Updates standard operating procedures (SOPs) or drafts corporate guidelines when local or federal regulations change. Assist with change management policies.
• Audit support: Acts as a supporting role for external auditors, regulatory agencies, and executive boards.
• Employee Training: Develops educational training modules to ensure workforce teams follow safe and ethical business practices.

Required Qualifications

• Active Certified CMMC Professional (CCP) certification.
• Working knowledge of the Cybersecurity Maturity Model Certification (CMMC) framework.
• Knowledge of NIST SP 800-171 and protection requirements for CUI.
• Experience supporting cybersecurity compliance, risk management, audits, assessments, or security control implementation.
• Experience developing or reviewing cybersecurity policies, procedures, SSPs, POA&Ms, or other compliance documentation.
• Ability to interpret cybersecurity requirements and communicate them to both technical and non-technical stakeholders.
• Strong documentation, organization, and attention-to-detail skills.

Preferred Qualifications

• Experience supporting CMMC Level 2 readiness or assessments.
• Experience conducting NIST SP 800-171 assessments or gap analyses.
• Familiarity with NIST SP 800-171A, SPRS scoring, and DoD cybersecurity requirements.
• Experience working within the Defense Industrial Base (DIB) or government contracting environment.
• Familiarity with Microsoft 365/Azure environments and common cybersecurity technologies.
• Additional cybersecurity certifications such as Security+, CISSP, CISM, or CISA are a plus.

Education and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, or a related field preferred.
• Relevant cybersecurity, compliance, or government contracting experience may be considered in lieu of a degree.

Benefits: 

• 100% company-paid Medical deductible w/ low premiums, Dental, Vision 
• Flexible Spending Account (FSA) 
• Short-term & Long-term Disability 
• 401K: 6% dollar-for-dollar match (vested immediately) 
• Parental Leave (same amount of time for mother & father) 
• Paid Time Off 
• 11 Federal Holidays  
• Birthday Holiday 
• 2-week fully paid Sabbatical every 5 years 
• Emergency Facility Closure Days 

salary: $90,000 - $105,000

COMSO, Inc. is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, gender identity, national origin, disability, or protected Veteran status.