CMMC Level 2 Gap Analysis Consultant

About the role

The CMMC Level 2 Gap Analysis Consultant will work on‑site in Dubai, helping clients assess their environments against CMMC Level 2 requirements. The role involves identifying control gaps, creating remediation plans, and supporting clients in preparing for formal CMMC assessments.

Key responsibilities

• Review existing policies, procedures, and technical controls to map current practices to CMMC Level 2 domains.
• Conduct stakeholder interviews, analyze findings, and produce clear assessment reports for client leadership.
• Collaborate with internal and client teams to prioritize remediation activities and track progress.
• Advise on best practices for secure cloud adoption and stay updated on relevant regulatory and cybersecurity standards.

Required profile

• Strong analytical ability to interpret complex compliance requirements and identify gaps.
• Effective communication and consulting skills for engaging stakeholders and presenting recommendations.
• Background in risk assessment, compliance, or audit roles, preferably within regulated or defense‑related industries.
• Bachelor’s degree in Information Security, Computer Science, Information Systems, Finance or related field; relevant certifications are a plus.

Required skills

• CMMC Level 2 framework knowledge.
• Experience with NIST SP 800‑171 and ISO 27001 standards.
• Understanding of cloud computing and hybrid IT environments.
• Risk assessment and compliance auditing expertise.