Cybersecurity Consultant

The Cybersecurity Consultant supports CMMC client engagements including client environment as-is assessments, Plan of Action & Milestones (POAM) identification & documentation, non-compliance recommendations, policy and procedure delivery/customization. This role works as part of the NeoSystems Program Management and Quality Assurance team to assist organization in achieving and maintaining compliance with the Cybersecurity Maturity Model Certification (CMMC) and related frameworks. Responsibilities include conducting security assessments, supporting gap analysis and remediation planning, and collaborating with client stakeholders to strengthen their overall cybersecurity posture.  

Role & Responsibilities: 

• Support CMMC client engagements including as-is security assessments, compliance analysis, and remediation planning.  

• Assist with the identification, documentation, and tracking of Plans of Action & Milestones (POAM) related to cybersecurity compliance gaps.  

• Work with external stakeholders to understand business requirements and capabilities to achieve CMMC compliance.   

• Deliver NeoSystems strategies, documentation, and policies to implement, achieve, and maintain compliance with CMMC requirements.   

• Participate in client information security risk and compliance assessments and audits.   

• Lead client gap analysis and remediation plans.   

• Deliver external processes to support the overall maturity of the Federal practice within client organization.  

Competencies / Skills: 

• Minimum of 4 years of experience in consulting and cybersecurity experience   

• Familiarity with CMMC (NIST 800-171) and CUI  

• Security+ or more advanced certification required or equivalent work experience  

• CMMC-RP certification required 90 days after employment.  

• Strong written and verbal communication skills with the ability to clearly convey complex cybersecurity concepts to diverse stakeholders.  

• Strong analytical skills to find solutions and to optimize client’s cybersecurity posture with attention to detail, especially around customization of documentation sets and navigating potential audit considerations.   

• Ability to collaborate effectively with internal teams and client stakeholders.   

• Commitment to supporting clients in improving and maintaining their cybersecurity posture in alignment with evolving industry standards and regulatory requirements.   

Where required by law, this posting includes a good‑faith pay range for candidates who will perform the role in specific jurisdictions. For other locations, the actual compensation may differ. Final compensation will be determined based on qualifications, experience, skills, work location, internal equity, and current market data. This job posting is not a contract or promise of employment or any particular compensation, and any employment offer will be set out in a written offer letter. 

EOE M/F/D/V