SeniorConsultant-FedRAMPAssessment

## Accountabilities Lead and execute FedRAMP and broader cybersecurity assessments by evaluating client environments against regulatory and industry frameworks, ensuring compliance with standards such as NIST and federal requirements. Conduct end-to-end audit and assessment activities including planning, evidence collection, control evaluation, and stakeholder interviews. Develop, review, and deliver detailed assessment reports with clear findings, risk insights, and remediation recommendations. Advise clients on improving security posture by interpreting control requirements and mapping gaps to actionable improvements. Draft audit programs aligned with FedRAMP, FISMA, and NIST frameworks and ensure high-quality execution of assessment methodologies. Coordinate closely with project managers and delivery teams to manage timelines, priorities, and project execution quality. Perform technical and documentation reviews, including remote and offline evidence inspection and validation of security controls. Support client engagement throughout the lifecycle, including walkthroughs, inquiries, and compliance education. Identify risks, escalate issues appropriately, and contribute to continuous improvement of delivery practices and methodologies. Requirements: 5–10 years of experience in IT consulting, cybersecurity assessments, or risk/compliance roles, with strong exposure to FedRAMP, FISMA, and related government frameworks. Strong understanding of NIST standards, particularly NIST SP 800-30, 800-37, and 800-53, and experience supporting ATO/C&A processes. Hands-on experience conducting security assessments, audits, and compliance reviews in cloud or enterprise environments. Active CISSP certification is required, along with at least one additional relevant certification (e.g., CISA, CISM, CySA+, GCIH, GSNA, CASP+). Strong technical literacy across cloud and virtualization environments, security tools, and enterprise architectures. Excellent written and verbal communicati