Consultant Cybersecurity Compliance & Advisory

SecureIT is hiring a Consultant to deliver cybersecurity compliance and FedRAMP advisory support focused on CR26/NIST 800-53-based readiness, gap analysis, and strategy development.

• Provide technical and FedRAMP subject-matter guidance to clients on assigned engagements.
• Produce accurate advisory recommendations, including gap analyses and supporting deliverables.
• Lead or participate in client discussions on complex FedRAMP topics under the Manager’s direction.
• Support knowledge transfer by delivering technical guidance to Associates and Sr. Associates
  .
• Escalate technical, scope, or client-risk concerns in a timely manner to the Manager.
• Discuss complex FedRAMP areas, including:
  • Container security
  • Boundary protection
  • FIPS 140 validated encryption
  • Phishing-resistant MFA
  • DNSSEC
• Analyze system boundaries and advise clients according to FedRAMP rules, or relevant requirements for DoW FedRAMP equivalency and GovRAMP authorization
  .
• Deliver technology-specific guidance for cloud platforms and security tooling, including:
  • Cloud:
    AWS
    , Azure
    , GCP
  • Environments/OS:
    Windows
    , Unix
  • Containers and orchestration:
    Docker
    , Kubernetes
  • Security tools:
    Okta
    , Wiz
    , Splunk (and others as applicable)
• Explain applicable CR26 rules
  , identify gaps in CSP processes, and recommend corrective actions.
• Review CSP-defined KSI metrics to detect gaps (or identify control gaps for rev5 baseline engagements
  ) and recommend remediation.
• Document how the CSP implements CR26 rules and KSIs (or rev5 controls
  ) for the SDR
  , including verification and validation approach and required artifacts.
• Use a “
  what-will-assessors-look-for
  ” approach to help ensure artifacts withstand scrutiny from assessors, PMO, and agency customers.
• Advise clients on FedRAMP certification processes, including timelines and Continuous Monitoring (Con Mon) expectations.
• Help clients plan, establish, and execute regular Con Mon processes, including ongoing vulnerability management after VDR/VER and additional CR26 processes.
• Provide subject-matter guidance on complex Con Mon and ongoing reporting issues in CR26, and support performance where needed.
• Support team members with FedRAMP requirements, cloud architectures,
  Dev Sec Ops , and security tools/technologies.
• Contribute lessons learned, templates, and technical guidance to service-line playbooks.
• Conduct deep technical research on specific matters as directed by SMEs or the CKO.

• 6+ years of experience in cybersecurity compliance, risk management, or advisory services in a professional services capacity.
• 2+ years of experience with FedRAMP engagements.
• Strong knowledge of legacy FedRAMP requirements and NIST 800-53 control families; growing understanding of CR26 rules and 20x KSIs
  .
• Understanding of cloud computing technologies:
  AWS
  , Azure
  , and/or GCP
  .
• Experience advising on cloud architecture, security configurations, and compliance best practices.
• Familiarity with: container security,
  Infrastructure as Code
  , boundary protection,
  FIPS 140 validated encryption
  , phishing-resistant MFA,
  DNSSEC
  , and other modern cybersecurity mechanisms/technologies.
• Strong communication skills for explaining complex compliance and security concepts to non-technical stakeholders.
• Ability to present solutions clearly to both C-level executives and technical teams.
• Strong analytical and problem-solving skills for practical solutions to complex security/compliance challenges.
• Effective time management and adaptability in a rapidly changing environment.
• Strong writing and documentation skills.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (advanced degrees are a plus).
• At least one industry-recognized certification, such as:
  • CISSP
    , CCSP
    , CCSK
    , CCAK
  • Hyperscaler-specific certifications (e.g.,
    AWS…