✦ Luna Orbit — Cybersecurity

CMMC / NIST Consultant / Analyst

at Hotman Group

📍 Remote, US Remote Posted April 02, 2026
Type Contract
Experience mid
Exp. Years 3-5 years
Education Not Specified
Category Cybersecurity

CMMC/NIST consultant/analyst to support client projects involving CMMC readiness, SSP development, NIST SP 800-171/800-53, and FedRAMP documentation in a remote consulting setting.

  • Support client engagements related to CMMC readiness, develop and maintain SSPs, assist with NIST 800-171/800-53 and FedRAMP documentation, gather evidence, draft control narratives, identify gaps and support POA&Ms, contribute to readiness efforts

Hands-on GRC experience with CMMC-related work, SSPs and remediation documentation; remote, independent work capable.

The ideal candidate is a mid-level cybersecurity consultant with hands-on CMMC experience and SSP documentation capabilities, able to map controls, gather evidence, and track remediation in a remote, contract setting.

Hands-on experience with CMMC-related work (Required)Experience working with SSPspoliciesproceduresevidence collectionand remediation documentation (Required)
Experience supporting CMMC Level 2 effortsCUI scoping or enclaves experiencePOA&M crosswalksCCPCCACISSPCISMor CISA certifications
CMMCNIST SP 800-171NIST SP 800-53FedRAMPSystem Security Plans (SSP)evidence collectioncontrol documentationPOA&Mremediation trackingpolicy narratives
CMMCNIST SP 800-171NIST SP 800-53FedRAMPSystem Security Plans (SSP)evidence collectioncontrol documentationPOA&Mremediation trackingpolicy narratives
writingdocumentationorganizationindependenceclient-facing professionalism

Preferred

CCPCCACISSPCISMCISA
Industry Consulting & Advisory
Job Function Provide CMMC/NIST GRC consulting and documentation support for client engagements
Role Subtype GRC Analyst
Tech Domains Cybersecurity
cMMC consultantnist sp 800-171nist sp 800-53fedrampsystem security planssspevidence collectioncontrol documentationpoa&mremediation trackingpolicy narrativesgRCcybersecurityremotecontractus work authorizationcmmcpolicy documentationcontrol mapping

No CMMC experience, Lack of SSP/documentation experience, Inability to work remotely

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile