FedRAMP Senior Consultant

Baker Tilly•Washington, DC

43d•$85,910 - $162,890

About The Position

Baker Tilly is hiring a FedRAMP Senior Assessor for its Risk Advisory practice, which helps clients assess risks, develop strategies, and achieve their goals through expertise in risk, governance, internal audit, compliance, IT, and cybersecurity. The role leads advisory and assessment engagements, performs gap analyses, evaluates control evidence, documents test results, and supports preparation of FedRAMP security assessment deliverables. The position requires strong knowledge of FedRAMP, GovRAMP, and NIST, along with analytical, critical-thinking, and writing skills. Work location arrangements should be discussed with a Baker Tilly talent acquisition professional. Travel may be required, approximately 25%.

Requirements

Four-year degree.
At least three years of experience.
Strong knowledge of FedRAMP, GovRAMP, and NIST.
Critical-thinking and analytical skills.
Writing and basic editing skills, including the ability to write at FedRAMP’s required level of detail.
Ability to travel as needed, approximately 25%.

Nice To Haves

Bachelor’s degree, preferably with a major in cybersecurity, information technology, or information systems.
At least three years of information security auditing experience, demonstrating steady growth in skills and responsibility.
Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards.
Working experience in information security as it relates to audit and compliance.
CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+, or comparable IT security accreditation.
Excellent verbal and written communication skills.
Proven commitment to exceptional internal and external client service.
Ability to collaborate effectively across functions, departments, and teams while building trusted relationships and positively influencing others.
Strong attention to detail and accuracy.
Strong analytical and creative problem-solving skills.
Effective time management and organizational skills, including the ability to prioritize while managing numerous projects or processes, often under tight deadlines.

Responsibilities

Lead advisory and assessment engagements.
Conduct gap analyses.
Write system security plans, policies, procedures, and other required documents.
Evaluate and assess evidentiary artifacts and determine whether they are sufficient to meet controls.
Document control test results based on FedRAMP-defined test case procedures.
Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table.
Conduct stakeholder interviews, security boundary discussions, and control walkthroughs with clients to verify control implementation status.
Provide exceptional client service.
Travel as needed, approximately 25%.