Senior Security Control Assessor

Responsibilities Be client-centric Lead advisory and assessment engagements Conduct gap analyses Write system security plans, policies, procedures, and other required documents Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control Document control test results based on FedRAMP-defined test case procedures Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status Possess strong knowledge of FedRAMP, GovRAMP, and NIST Critical thinking, analytical, writing, and basic editing skills with the ability to write to FedRAMP’s level of detail Requirements Bachelor's degree or equivalent experience required; major in cybersecurity, information technology, or information systems preferred Minimum of three years of experience in information security auditing, demonstrating a steady growth of skills & responsibility required Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards Working experience of information security as it relates to audit and compliance CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+ certification or comparable IT security accreditation preferred Excellent verbal and written communication skills Proven commitment to providing exceptional client service (internal and external) Ability to collaborate and work effectively across functions/departments/teams while building trusted relationships and positively influencing others Strong attention to detail and accuracy. Strong analytical and creative problem‑solving skills Effective time management and organizational skills, proven ability to prioritize while simultaneously managing numerous projects/processes often under tight deadlines Ability to travel as needed, approximately 25% #J-18808-Ljbffr