FedRAMP Senior Assessor

Moss Adams LLP•Salt Lake City, UT

71d

About The Position

At Moss Adams, we champion authenticity. For us, that means fostering a culture of talented people who care-about you, about our clients, and about our communities. Here, you'll work towards our mission of empowering others to embrace opportunity, growing as a leader along the way. Our firm's size, middle-market clients, customized career paths, and supportive culture make this a reality. Join a values-driven firm where you'll have fun while solving complex and interesting business challenges. Introduction to the team Moss Adams Cybersecurity Consulting is a leader in providing IT security and compliance services to middle market companies and organizations. Our team is made up of cybersecurity specialists who come from business, IT, and consulting backgrounds to assist our clients with a diverse set of needs, including network and web application penetration testing, data security regulation compliance, disaster recovery planning, and strategic technology planning. We're looking for FedRAMP and GovRAMP Advisors and Assessors to join our team to consult and assess cloud service providers for FedRAMP, FedRAMP 20X, GovRAMP, FISMA, NIST, CMMC, or other related projects. Come join us and be part of a dynamic and growing team Individuals who thrive at Moss Adams exhibit the following success skills - Collaboration, Critical Thinking, Emotional Intelligence, Executive Presence, Growth Mindset, Intellectual Curiosity, and Results Focus.

Requirements

Bachelor's degree or equivalent experience required; major in cybersecurity, information technology, or information systems preferred
Minimum of three years of experience in information security auditing, demonstrating a steady growth of skills & responsibility required
Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards
Working experience of information security as it relates to audit and compliance
CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud , CASP certification or comparable IT security accreditation required
Excellent verbal and written communication skills
Proven commitment to providing exceptional client service (internal and external)
Ability to collaborate and work effectively across functions/departments/teams while building trusted relationships and positively influencing others
Strong attention to detail and accuracy. Strong analytical and creative problem-solving skills
Effective time management and organizational skills, proven ability to prioritize while simultaneously managing numerous projects/processes often under tight deadlines
Ability to travel as needed, approximately 25%

Responsibilities

Be client-centric
Lead advisory and assessment engagements
Conduct gap analyses
Write system security plans, policies, procedures, and other required documents
Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control
Document control test results based on FedRAMP-defined test case procedures
Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status
Possess strong knowledge of FedRAMP, GovRAMP, and NIST
Critical thinking, analytical, writing, and basic editing skills with the ability to write to FedRAMP's level of detail