Work 100% remote helping DoD contractors pass CMMC audits and ship audit-ready documentation.

Role: Cybersecurity Compliance Consultant

Location/Type: U.S. • Remote

Pay: $100,000–$125,000

Schedule: Full-time

What you’ll do

• Lead CMMC policy development across all 14 domains
• Write SSPs and manage POA&Ms end-to-end
• Run compliance sprints with 5–10 clients (clear ownership)
• Map evidence to NIST 800-171 controls (audit-ready)
• Manage GRC platform and client progress dashboards
• Translate technical controls into clear client actions
• Coordinate evidence collection with technical teams

Must-haves

• 3–5 years cybersecurity GRC, IT audit, or IA
• Deep NIST 800-171 + CMMC knowledge
• Security+ certification
• Strong technical writing (audit-defensible docs)
• Manage multiple clients at once
• U.S. Citizenship required

Nice to have

• CCP or RP certification (or ability to obtain fast)
• Experience with FutureFeed, Apptega, or Purview
• Prior C3PAO audit support
• SSP or POA&M ownership

Perks & pay

• Pay: $100,000–$125,000
• Benefits: health, dental, vision, 401(k), PTO
• Fully remote work setup
• Work on real CMMC audits (not theory)
• Growth with a scaling GovCon consulting team

Schedule & setup

• Full-time, remote
• U.S. time zones
• No travel required
• Tools: GRC platforms, documentation-heavy workflows

Impact & growth

Your work gets clients audit-ready.

You turn messy systems into compliant, defensible environments.

Own documentation and client outcomes from day one.

Motivation fit

You like clear ownership.

You can manage multiple clients without hand-holding.

At Urrly, fairness matters. We use AI to review every application against the same clear requirements for the role. This means every candidate is evaluated on job-related factors like skills, certifications, and experience—not on personal attributes such as gender, race, age, or background. Our goal is to create a more objective, consistent, and equal opportunity hiring process for all applicants.

Apply Today to work remotely while owning real CMMC compliance work end-to-end.