GRC Consultant

Paragon Cyber Solutions is seeking a highly skilled and motivated Governance, Risk, and Compliance (GRC) Consultant to support cybersecurity compliance initiatives and conduct in-depth security assessments. The position requires deep expertise in cybersecurity, compliance frameworks, and risk management, with a particular emphasis on the Cybersecurity Maturity Model Certification (CMMC). The ideal candidate will bring strong analytical skills, attention to detail, and the ability to deliver high-quality results across a variety of security-focused initiatives. 

Responsibilities

CMMC Assessment Responsibilities:

• Conduct formal CMMC assessments in accordance with CMMC Accreditation Body (CMMC-AB) guidelines and methodologies.
• Document assessment findings and produce detailed reports outlining compliance status, non-conformities, and recommendations for improvement.
• Maintain current knowledge of the CMMC framework and emerging cybersecurity standards.

Cybersecurity Responsibilities:

• Conduct risk assessments, vulnerability analysis, and policy reviews to enhance organizational security postures.
• Assist with developing, implementing, and maintaining security policies and procedures aligned with industry best practices (e.g., NIST SP 800-171, ISO 27001).
• Support incident response planning and execution, ensuring robust organizational readiness.
• Collaborate with clients and internal teams to develop cybersecurity training programs.
• Provide general advisory services on IT security and compliance for government and commercial clients.

Administrative & Team Support:

• Contribute to proposal development for cybersecurity-related contracts and services.
• Participate in business development discussions and identify opportunities to expand CMMC and cybersecurity service offerings.
• Collaborate with cross-functional teams to ensure seamless project execution and client satisfaction.

Mandatory:

• At least 3 years of experience in cybersecurity compliance, auditing, or risk management, ideally in the defense industry.
• A solid grasp of the CMMC framework, NIST SP 800-171, DFARS, and cybersecurity best practices.
• Exceptional written and verbal communication skills, with the ability to convey technical ideas to non-technical individuals.
• Strong problem-solving abilities along with excellent organizational skills and a keen eye for detail.
• CompTIA Security+ CE or equivalent DoD 8140 Certification.
• Occasional or limited travel may vary based on client needs.

Preferred

• Hold an active CMMC Certified Assessor (CCA) certification, which includes Delta training and Suitability.
• Have experience with various compliance frameworks like ISO 27001, SOC 2, or PCI DSS.
• Be familiar with tools such as eMASS and Xacta.
• Possess security certifications like CISSP, CISM, or CEH.
• Earned a Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or have equivalent work experience.

• Health Care Plan (Medical, Dental & Vision).
• Retirement Plan (401K w/ employer matching).
• Paid Time Off & Paid Public Holidays.
• Short and Long-Term Disability.
• Healthy Work-Life Balance.
• Training & Development.

Why Work For Paragon Cyber Solutions?

You want to make a difference. You want to be recognized by name versus being a number. You want to work with a company where you can grow and work in different areas to increase your knowledge/experience. You have an entrepreneurial spirit and need to live it.

As a small business, each team member rolls up their sleeves and helps where needed (including our CEO). Our ideal candidate will be comfortable with multi-tasking and prefers working in a fast-paced, dynamic environment. You must be adaptable to the needs of a growing business.

A Model of Excellence

That’s our motto in all we do and what we seek in our team members.

Are you a hardworking professional seeking a new opportunity that fosters growth? Look no further!

We are an award-winning minority, woman, veteran-owned, 8(a), EDWOSB, SDVOSB, Tampa, FL-based small business. We pride ourselves on delivering high-quality solutions that help our clients protect the integrity of their business operations.