CMMC-Oriented Cybersecurity Gap Assessment Consultant - IT-Focused (1099 / Hourly)

Micharona Consulting LLC
United States
20 days ago

Role details

Contract type
Contract
Employment type
Part-time (≤ 32 hours)
Compensation
$114,400.0 - $176,800.0
Working hours
Regular working hours
Job source

Tech stack

Backup Devices Cyber Security Document Management Systems Data Logging

Job description

Micharona Consulting supports organizations working toward CMMC Levels 1-2 and related NIST 800-171 expectations. This contractor role focuses on IT-centric gap assessments: understanding how controls are implemented in practice and contributing to readiness documentation and recommendations.

What You’ll Do

  • Participate in CMMC-lean gap assessments using Micharona’s tools and templates.
  • Interview IT staff, MSPs, and leadership to understand control implementations.
  • Review technical artifacts (configs, diagrams, inventories, logging, backup) for alignment with CMMC-level expectations.
  • Help document control status and draft realistic remediation recommendations for SMB/MSP environments.

Requirements

  • Strong IT background (systems, networks, cloud, or MSP operations) with security control exposure.
  • Familiarity with CMMC or NIST 800-171/800-53 concepts and language; direct experience is a plus.
  • Ability to think in terms of “controls in practice,” not just policy wording.
  • Comfortable working as a 1099 contractor on scoped assessments and readiness projects.

Benefits & conditions

$55 - $85 an hour - Part-time, Contract

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:11 min

Establishing secure recovery factors without password fallbacks

Clemens Hübner Clemens Hübner · WWC 2023

1:10 min

Exposing sensitive information through partial search logs

Dennis Schulz Dennis Schulz +1 · WWC Europe 2026

1:12 min

Scaling threat modeling independently from external security consultants

Bruno Amaro Almeida · WWC 2022

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

2:07 min

Summarizing critical actions for organizational cybersecurity compliance readiness

Matthew Brady Matthew Brady · WWC Europe 2026

Videos

See all

Related articles

See all