Compliance Consultant, CMMC

This SkillBridge internship prepares participants to perform as a Compliance Consultant supporting Governance, Risk, and Compliance (GRC) engagements for U.S. federal and defense contractors at C3 Integrated Solutions. The training outcome is for the participant to be prepared to support and progressively perform Compliance Consultant responsibilities in CMMC and federal cybersecurity compliance, including CMMC Levels 1 and 2, NIST SP 800-171, DFARS 252.204-7012, the CUI Program, and FedRAMP Moderate Equivalency.

The Compliance Consultant Intern will support Governance, Risk, and Compliance (GRC) engagements for U.S. federal and defense-sector clients. The intern will gain hands-on experience documenting controlled data flows, defining compliance boundaries, assessing technical and non-technical requirements, developing security documentation, and supporting client compliance programs.Upon completion, the participant is expected to function as a Compliance Consultant, leading development and management of a Governance, Risk, and Compliance (GRC) program within client organizations across aerospace, defense, manufacturing, and R&D in the Defense Industrial Base. The role includes documenting the flow of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) through client business processes, determining system scope across technology, people, and business processes for compliance purposes, and assessing the current implementation of technical and non-technical requirements against CMMC, DFARS, FAR, and export controls. The Compliance Consultant develops and manages System Security Plans (SSPs), policies, and procedures, manages client expectations and coordination with internal and third-party resources, and provides ongoing advisory support to clients on security and compliance matters.