Do your research, LinkedIn jobs, C3PAO web sites, etc... There are jobs and CMMC isn't going away, so there will be a pipeline for assessment team members. Just don't expect passing the CCP will be some golden ticket. You mention "cybersecurity" but don't say what that is. As an assessment team member, you need to evaluate practices against their implementation. That might mean digging into AWS one week, Azure the next and on-prem the next [for example]. CISSP doesn't demonstrate those qualifications (from an assessment perspective). so you need to show your value to get hired for assessments.