Description

You will secure cloud environments and manage compliance frameworks within highly regulated sectors.

Responsibilities

• Review continuous monitoring programs and provide actionable recommendations for improvement.
• Conduct monthly FedRAMP continuous monitoring package analysis, including deviation requests, POA&Ms, and client summaries.
• Advise clients on FISMA/FedRAMP compliance activities in alignment with NIST and OMB requirements.
• Perform security risk assessments for third-party applications and service providers.
• Manage FedRAMP reporting requirements, including risk assessments, POA&Ms, and remediation plans.

Required Skills

• 7+ years of information security experience, specifically covering cloud security and continuous monitoring.
• Bachelor’s degree in information security, a related field, or equivalent experience.
• Advanced cybersecurity certification such as CISSP, CCSP, or CRISC.
• Extensive experience with NIST standards: SP 800-30 rev 1, 800-37 rev 1 or 2, 800-53 rev 5, 800-60 Vol 1 rev 1 & 2 rev 1, and 800-171 rev 3.
• Experience implementing systems in FedRAMP, FISMA, and SOX compliant environments.
• Proven ability to manage projects and influence stakeholder groups across different hierarchical structures.
• Knowledge of laws and regulations governing information security and compliance.

Preferred Skills

• Direct experience with government compliance including OMB requirements, RMF, and CSF.
• Deep understanding of cloud architectures, technologies, and services.

Key Skills

Education

Bachelor's Degree