CMMC Readiness, Compliance Consulting, and Career Lessons with Joe Schofield

In this episode of the Cybersecurity Recruiter Podcast, Tom speaks with Joe Scholefield, a former sysadmin/network engineer and ex-Dell cybersecurity manager, now serving as Director of Compliance at Deafcert, about helping defense contractors meet CMMC (based on NIST requirements) and preparing for DoD third-party assessments. Joe explains CMMC readiness commonly takes 12–18 months, with faster progress driven by aligned stakeholders, minimal internal resistance, and strong cross-department project management.

They discuss CMMC as both a cost and revenue differentiator, increasing supply-chain pressure from primes like Lockheed and RTX, and a looming assessor bottleneck given the number of companies needing certification versus C3PAOs. Joe sha ...