We use cookies. Find out more about it here. By continuing to browse this site you are agreeing to our use of cookies.
#alert
Back to search results

Manager, CMMC Cybersecurity Assessor

Forvis Mazars, LLP
United States, Virginia, Tysons
1410 Spring Hill Road (Show on map)
Mar 04, 2026


General information
Name
Manager, CMMC Cybersecurity Assessor
Posting Title
Manager, CMMC Cybersecurity Assessor
Ref #
2236451
Date Published
Tuesday, February 24, 2026
City
Charlotte
State
North Carolina
Country
United States
Job Category
Risk Advisory
Advertised Location
US-FL-Tampa Bay, US-GA-Atlanta, US-IN-Indianapolis, US-MO-Springfield, US-NC-Charlotte, US-TX-Dallas, US-VA-Tysons
Working time
Full Time

Description & Requirements
The IT Risk & Compliance team helps organizations manage IT governance, cybersecurity, and regulatory compliance across industries. With expertise in frameworks like CMMC, NIST, and ISO 27001, they offer services including IT audits, risk assessments, ransomware simulations, and control testing. Their tailored strategies ensure data security, regulatory alignment, and operational continuity-empowering clients to navigate today's complex digital risk landscape with confidence.
What You Will Do:
  • Lead the execution of information security risk and compliance assessments across federal and government-mandated cybersecurity frameworks, including:
    • CMMC (Cybersecurity Maturity Model Certification)
    • NIST SP 800-171 and 800-53
    • FedRAMP/StateRAMP
    • NIST Cybersecurity Framework (CSF)
  • Oversee the evaluation of IT environments to identify compliance gaps and security vulnerabilities; ensure delivery of comprehensive reports with strategic recommendations and proof-of-concept solutions.
  • Manage and direct NIST SP 800-171 assessments to support CMMC Level 2 certification readiness, ensuring alignment with evolving regulatory requirements.
  • Provide leadership to consulting teams supporting large enterprise clients across diverse industries by:
    • Defining system boundaries and scoping in-scope environments
    • Guiding the development of critical documentation, including System Security Plans (SSPs), policies, procedures, POA&Ms, and cybersecurity strategies
    • Designing and implementing integrated compliance solutions to streamline processes, enhance data flows, and reduce cyber risk
  • Drive project delivery by managing multiple concurrent engagements, ensuring adherence to timelines, budgets, and quality standards.
  • Spearhead the development of new strategic service offerings in the federal cybersecurity compliance space, including:
    • Designing scalable solution frameworks and roadmaps
    • Mentoring and developing junior team members
    • Supporting business development initiatives and client relationship management
Minimum Qualifications:
  • Bachelor's Degree in Cybersecurity, Management Information Systems (MIS), Computer Science, or a related field
  • 5+ years of relevant experience in cybersecurity, IT audit, or governance, risk, and compliance
  • Experience in a minimum of 1 of the following frameworks:
    • NIST Cybersecurity Framework (CSF)
    • Cybersecurity Maturity Model Certification (CMMC) and/or NIST SP 800-171
    • Payment Card Industry Data Security Standard (PCI DSS)
    • ISO 27001 / 27002
    • FedRAMP / StateRAMP
    • FISMA and NIST SP 800-53
    • CIS Critical Security Controls
  • Experience providing consulting, assessment, or implementation services associated with federal cyber compliance frameworks, including NIST 800-171, FISMA, or FedRAMP.
  • Working knowledge of cyber risk management frameworks (CMMC / NIST 800-171, FISMA, FedRAMP, NIST Cybersecurity Framework, NIST SP 800-53)
  • General knowledge of common compliance frameworks (PCI DSS, ISO 27001, HIPAA/HITRUST)
  • Proficiency in Microsoft Office Suite
  • CMMC Certified Assessor (CCA) credential
Preferred Qualifications:
  • Professional services or consulting experience
  • Current and valid cybersecurity and/or privacy-related certification(s), including but not limited to the following: CISSP, CISA, CISM, QSA, and CIPP
#LI-TPA, #LI-ATL, #LI-IND, #LI-SGF, #LI-CLTSP, #LI-DFW, #LI-TYS
#LI-GM1

About Forvis Mazars, LLP
Forvis Mazars, LLP is an independent member of Forvis Mazars Global, a leading global professional services network. Ranked among the largest public accounting firms in the United States, the firm's 7,000 dedicated team members provide an Unmatched Client Experience through the delivery of assurance, tax, and consulting services for clients in all 50 states and internationally through the global network. Visit forvismazars.us to learn more.


Forvis Mazars, LLP is an equal opportunity/affirmative action employer. Employment selection and related decisions are made without regard to age, race, color, sex, sexual orientation, national origin, religion, genetic information, disability, protected veteran status, gender identity, or other protected classifications. It is Forvis Mazars, LLP standard policy not to accept unsolicited referrals or resumes from any source other than directly from candidates.


Forvis Mazars, LLP expressly reserves the right not to consider unsolicited referrals and/or resumes from vendors including and without limitation, search firms, staffing agencies, fee-based referral services, and recruiting agencies. Forvis Mazars, LLP further reserves the right not to pay a fee to a recruiter or agency unless such recruiter or agency has a signed vendor agreement with Forvis Mazars, LLP. Any resume or CV submitted to any employee of Forvis Mazars, LLP without having a Forvis Mazars, LLP vendor agreement in place will be considered the property of Forvis Mazars, LLP.

Applied = 0

(web-bd9584865-vpmzc)