FedRAMP Senior Assessor
About The Position
Baker Tilly is hiring a FedRAMP Senior Assessor for its Risk Advisory practice, which helps clients assess risks, develop strategies, and achieve business objectives using expertise in risk, governance, internal audit, compliance, IT, and cybersecurity. The role involves leading advisory and assessment engagements and supporting clients with FedRAMP, GovRAMP, and NIST-related security and compliance work. The position offers career development, flexibility in how and where work is performed, and opportunities to build relationships with clients, teammates, and leadership. Work location requirements should be discussed with a Baker Tilly talent acquisition professional. Travel may be required, approximately 25%.
Requirements
- Bachelor's degree or equivalent experience.
- At least three years of experience in information security auditing, with demonstrated growth in skills and responsibility.
- Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards.
- Working experience in information security as it relates to audit and compliance.
- Excellent verbal and written communication skills.
- Commitment to providing exceptional service to internal and external clients.
- Ability to collaborate effectively across functions, departments, and teams while building trusted relationships and positively influencing others.
- Strong attention to detail and accuracy, analytical skills, and creative problem-solving skills.
- Effective time management and organizational skills, including the ability to prioritize and manage multiple projects or processes under tight deadlines.
- Ability to travel as needed, approximately 25%.
Nice To Haves
- Major in cybersecurity, information technology, or information systems.
- CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+, or comparable IT security accreditation.
Responsibilities
- Provide client-centric service.
- Lead advisory and assessment engagements.
- Conduct gap analyses.
- Write system security plans, policies, procedures, and other required documents.
- Evaluate evidentiary artifacts and determine whether they sufficiently meet controls.
- Document control test results based on FedRAMP-defined test case procedures.
- Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table.
- Conduct stakeholder interviews, security boundary discussions, and control walkthroughs with clients to verify control implementation status.
Benefits
- Comprehensive compensation and benefits package for eligible employees.
- Flexibility in how and where work is performed.
- Upward career trajectory and professional development.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
