Posted: May. 21, 2026
Clearance Requirements: Must be a U.S. Citizen and have passed a T3 background check
Responsibilities:
iPower is an Authorized CMMC Third-Party Assessor Organization (C3PAO) and among the first assessed by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) to demonstrate a Level 2 security posture. We are looking for 1099 consultants with CCP, CCA, or LCCA certifications to join our team of experts supporting commercial and DoD cybersecurity initiatives.
The Cybersecurity Assessor supports iPower’s service delivery engagements/projects and interacts directly with our clients. Under the guidance of iPower’s PMO, assessors follow our processes and procedures to provide the following services while maintaining a high level of customer satisfaction:
- Conduct comprehensive assessments of Defense Industrial Base (DIB) organizational networks and systems to identify any vulnerabilities and to confirm they meet the necessary CMMC level requirements.
- Perform gap analyses comparing client environments against CMMC, NIST SP 800-171/172, and other relevant frameworks and work with organizations to design and implement security measures and controls, in line with CMMC standards.
- Develop and implement action plans necessary to achieve CMMC compliance.
- Assist organizations with the review and update of existing security policies and procedures to align with evolving CMMC requirements and best practices in cybersecurity.
- Prepare detailed reports on the status of an organization’s CMMC compliance.
- Keep abreast of the latest cybersecurity threats and trends, as well as updates to the CMMC framework.
Qualifications:
- Current certification under the CMMC version 2.0 framework is required: CCP, CCA, or LCCA.
- Bachelor’s degree in information technology or computer science with at least four (4) years of relevant experience in IT security, risk management, or compliance.
- In-depth knowledge of the CMMC framework, NIST SP 800-171, DFARS 252.204-7012 and associated Department of Defense (DoD) regulations and an advanced understanding of cyber security policy, tools, threat mitigation techniques, network topologies, and secure network design.
- Relevant experience and prior success leading and delivering consulting engagements
- Proven experience in a role focused on IT security, risk management, or compliance.
- Superior communication skills with the ability to explain complex security concepts to non-technical staff.
- Strong customer service orientation and the ability to develop trusting relationships with iPower’s clients.
- Strong organizational abilities, and effective writing and communications skills.
- Must be well organized, self-motivated, detail oriented and able to meet deadlines.
- Willingness to travel occasionally if needed for business.
- Security certifications – one or more of the following preferred: CCISO, CISM, CISA, CISSP, etc.
Company Information:
With more than 25 years of experience, iPower has built a strong reputation for delivering high‑quality appraisals, assessments, and audits. Our consultants are supported by proven expertise, robust tools, and well‑established processes at every stage of engagement. Join our team and grow your technical capabilities while advancing your consulting career.
Place of Performance:
- This position is fully remote, but occasional travel to client sites may be required.
