Lead Federal Auditor

Contribute to authorization package documentation, including SSPs, POA&Ms, and SAPs, for FedRAMP High baseline requirements Coordinate with 3PAOs and federal agency sponsors on scheduling, evidence collection, and artifact preparation for FedRAMP and DoD IL4/IL5 assessments Respond to assessor inquiries Implement and document NIST SP 800-53 controls, validate effectiveness, and gather evidence across FedRAMP Moderate, High, and DoD IL4/IL5 boundaries Execute continuous monitoring, including monthly vulnerability scanning reviews, POA&M tracking, agency and DoD deliverables, and annual assessment support Assess system architectures with cloud and infrastructure teams to identify compliance gaps Conduct gap analyses and readiness assessments ahead of 3PAO assessments Develop and improve FedRAMP policies, procedures, control implementation descriptions, and internal documentation standards Review and respond to federal customer security questionnaires and due diligence requests Prepare compliance status summaries, POA&M updates, and control assessment findings for senior leadership Monitor FedRAMP PMO, NIST, and DoD SRG updates and federal cybersecurity directives Participate in cross-functional projects integrating FedRAMP High and DoD IL4/IL5 requirements into product development Requirements Solid hands-on experience with FedRAMP compliance processes and federal risk management frameworks Exposure to FedRAMP High and DoD Impact Level IL4/IL5 environments Working knowledge of NIST SP 800-53 Rev. 4/5 High baseline controls and practical cloud application Familiarity with DoD Cloud Computing SRG and IL2/IL4/IL5 requirements Experience contributing to authorization artifacts, including SSP, SAP, SAR, POA&M, and ConMon deliverables Familiarity with FedRAMP, FISMA, NIST SP 800-53, NIST SP 800-37 (RMF), NIST SP 800-171, GovRAMP, CMMC, and

NIST CSF

Experience with cloud/SaaS environments, particularly AWS GovCloud, Azure Government, or other IL-accredited platforms 5+ years in information security, compliance, or risk management, with federal program exposure 5+ years of hands-on FedRAMP experience, including CSP compliance, 3PAO assessment support, or federal agency ISSO activities Strong written and verbal communication skills across technical and non-technical audiences Experience producing audit findings, policies, and compliance reports Certifications preferred: CISSP, CISA, CAP, Security+, or equivalent Core Competencies Demonstrates expertise in FedRAMP compliance processes and federal risk management frameworks, with a strong focus on NIST SP 800-53 controls and cloud application security. Capable of developing and improving compliance documentation and policies while effectively communicating with technical and non-technical stakeholders. Highest-signal resume keywords FedRAMP Compliance NIST SP 800-53 Controls Cloud/SaaS Environments Authorization Artifacts Development Federal Risk Management Frameworks ATS Optimization Keywords Hard Skills FedRAMP High Baseline Requirements NIST SP 800-53 Rev. 4/5 Continuous Monitoring Gap Analysis Vulnerability Scanning Compliance Reporting Control Assessment Artifact Preparation Evidence Collection Risk Management Soft Skills Strong Written Communication Strong Verbal Communication Certifications & Qualifications CISSP CISA CAP Security+ Industry Keywords FISMA GovRAMP CMMC NIST CSF DoD IL4/IL5 Requirements Compliance Status Summaries POA&M Tracking Federal Cybersecurity Directives Tools & Technologies AWS GovCloud Azure Government 3PAO Assessment Support #J-18808-Ljbffr Jobtailor