Sr. Associate, FedRAMP Assessment

Overview

What You’ll Do:

We are seeking a Senior Associate FedRAMP Assessor to join our FedRAMP Assessment service line. This position requires a general understanding of cloud security frameworks, NIST 800-53 controls, and the overall FedRAMP process. You will work under the guidance of senior assessors and service line leads to perform technical evaluations of cloud systems, assist with documentation and support assessment engagements for Cloud Service Providers (CSPs).

This is a great opportunity to learn and grow with Secure

IT.

What You’ll Bring to the Table:

• Assist in executing FedRAMP Security Assessments in accordance with NIST SP 800-53 and FedRAMP PMO requirements.
• Support the development of Security Assessment Plans (SAP) and Security Assessment Reports (SAR).
• Collect, review, and organize evidence in support of control assessments.
• Interview clients based on assigned controls.
• Respond to client questions/comments regarding assigned controls.
• Participate in control testing activities including vulnerability scan validation, configuration reviews, and system walkthroughs.
• Support client communications, status meetings, and coordination during the assessment lifecycle.
• Document technical findings, observations, and test results in the Test Case Workbook.
• Update secure repository status for assigned controls.
• Escalate assessment findings and/or client issues to project lead upon discovery.
• Maintain up-to-date knowledge of FedRAMP, FISMA, and NIST cybersecurity guidance.

• Knowledge &
  
  Experience:
  
  3-4 years of experience in cybersecurity, compliance, or IT auditing.
• Experience supporting a cybersecurity consulting engagement preferred.
• Technical
  
  Skills:
  
  Foundational knowledge of NIST SP 800-53 security controls and FedRAMP authorization processes.
• Experience with cloud platforms (AWS, Azure, or GCP) from a security or compliance perspective.
• Soft Skills:
  
  Strong verbal communication and documentation skills.
• Strong analytical and problem-solving skills to assess security and compliance challenges and provide practical solutions.
• Effective time management and organizational skills and an ability to adapt in a rapidly changing environment.
• Certifications:
  
  Relevant certifications such as Security+, Cloud+, CAP, or CISA (or working toward them).
• Education:
  
  Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field.