Information Protection Advisor - SSP & CMMC Programs
Core
Develop, update, and maintain federal System Security Plans (SSPs) and compliance documentation to ensure audit readiness and support CMMC/NIST frameworks.
Role type
Senior Information Protection Advisor (Compliance & Documentation)
Builds
Audit-ready security documentation, control evidence repositories, and compliance artifacts for federal operations.
Domain
Federal Cybersecurity Compliance (CMMC, NIST SP 800-171/53)
Required skills
System Security Plan (SSP) development, NIST requirements interpretation, control mapping, evidence collection, POA&M management, risk management, audit coordination, documentation quality assurance, system boundary definition, regulatory framework knowledge
Preferred skills
CMMC experience, NIST SP 800-171/53 expertise, DoD security requirements knowledge, SOC 2/PCI/SOX/HITRUST familiarity, regulatory assessment support, CISSP/CISM/CISA/CCP/CCA certifications, technical writing, presentation skills
Technologies
NIST SP 800-171, NIST SP 800-53, CMMC, POA&Ms, System Inventories, Control Narratives, Evidence Repositories
Responsibilities
Develop and maintain federal System Security Plans (SSPs) and related compliance documentation; Partner with system owners and engineering teams to validate control implementations; Track documentation updates, open items, and remediation activities; Gather and maintain control evidence in approved repositories; Support compliance assessments, audits, and certification activities; Identify documentation gaps and escalate compliance concerns; Maintain compliance artifacts including policies, procedures, and assessment records; Support CMMC readiness through control mapping and gap assessments; Assist with defining compliance scope and system boundaries; Contribute to templates and quality reviews for documentation standards.
Seniority
Senior, hands-on IC
