← All Jobs
Posted May 12, 2026

CMMC / NIST Consultant / Analyst at Hotman Group

Apply Now
This a Full Remote job, the offer is available from: Austria, Texas (USA) Hotman Group is seeking a CMMC / NIST Consultant / Analyst to support client projects involving CMMC, SSP development, NIST SP 800-171, NIST SP 800-53, FedRAMP, evidence collection, control documentation, and remediation tracking. This is a contract role that may be structured as part-time or full-time based on project needs and candidate availability. We are looking for a mid-level practitioner who can contribute to active client delivery work, produce strong documentation, and help move projects forward in a remote consulting environment. What You’ll Do • Support client engagements related to CMMC readiness, implementation, and documentation • Develop, update, and maintain System Security Plans (SSPs) • Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverables • Gather, organize, and review evidence supporting control implementation • Draft and refine control narratives, policies, procedures, and related compliance documentation • Identify gaps and support development of POA&Ms and remediation tracking • Work with client stakeholders to collect information, validate details, and keep deliverables moving • Contribute to readiness efforts tied to assessments, documentation, and ongoing compliance activities What we're looking for • 3-5 years of relevant experience in GRC, cybersecurity compliance, or related consulting work • Hands-on experience with CMMC-related work (Required) • Experience working with SSPs, policies, procedures, evidence collection, and remediation documentation (Required) • Familiarity with NIST SP 800-171, NIST SP 800-53, and FedRAMP • Strong writing and documentation skills • Ability to work independently in a remote environment • Strong organization, follow-through, and professionalism in client-facing work • Comfort stepping into active projects and supporting delivery work with minimal hand-holding Nice to Have • Experience supporting CMMC Level 2 efforts • Experience with CUI scoping, enclaves, or boundary discussions • Familiarity with POA&Ms, assessment readiness, and control crosswalks • Certifications such as CCP, CCA, CISSP, CISM, or CISA Requirements • Authorized to work in the U.S. • Able to pass a background check • Reliable high-speed internet and a secure remote work setup About Hotman Group Hotman Group is a remote boutique cybersecurity and GRC firm supporting clients across a range of industries and compliance needs. We value strong writing, quality work, collaboration, sound judgment, and practical execution. This role is a strong fit for someone who wants to contribute to meaningful CMMC project work in a contract capacity, whether that means part-time project support or full-time contract availability. This offer from "Hotman Group, LLC" has been enriched by Jobgether.com and got a 77% flex score. Apply tot his job Apply To this Job