Summary description:

This opportunity provides hands-on experience supporting a CMMC Third-Party Assessor Organization (C3PAO) performing formal CMMC assessments for DoD contractors. Interns will be embedded in the assessment team and contribute to audit preparation, evidence evaluation, and reporting tasks—developing the foundational skills of a certified CMMC Assessor. Team members are trained on ISO/IEC 17020:2012 quality standards and industry best practices, including performance reviews and internal debriefs. This internship is ideal for transitioning service members seeking a career in cybersecurity, audit, and compliance.

Job description:

During the internship, candidates will gain real-world experience conducting formal CMMC Level 2 assessments as a Certified CMMC Professional (CCP). Interns will support cybersecurity assessments for organizations in the Defense Industrial Base (DIB), reviewing system documentation, evaluating technical configurations, and interviewing personnel to verify compliance with the 110 CMMC security requirements.Interns will also participate in follow-up reviews of Plan of Action & Milestones (POA&Ms), collaborate with senior assessors to address escalation issues, and help develop detailed reports that drive certification success and client readiness. The role also provides exposure to report writing, evidence evaluation, and internal quality control aligned with accredited C3PAO assessment practices.Candidates will observe how CMMC Third-Party Assessor Organizations (C3PAOs) operate, and will gain insight into how impartial audits are conducted without providing implementation guidance.

Eligibility factors: