FedRAMP Senior Assessor
Baker Tilly
Overview
Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.
Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram.
Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring.
Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.
Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.
Job Description:
Baker Tilly Cybersecurity Consulting is a leader in providing IT security and compliance services to middle market companies and organizations. Our team is made up of cybersecurity specialists who come from business, IT, and consulting backgrounds to assist our clients with a diverse set of needs, including network and web application penetration testing, data security regulation compliance, disaster recovery planning, and strategic technology planning. We’re looking for FedRAMP and GovRAMP Advisors and Assessors to join our team to consult and assess cloud service providers for FedRAMP, FedRAMP 20X, GovRAMP, FISMA, NIST, CMMC, or other related projects. Come join us and be part of a dynamic and growing team
Responsibilities:
Be client-centric
Lead advisory and assessment engagements
Conduct gap analyses
Write system security plans, policies, procedures, and other required documents
Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control
Document control test results based on FedRAMP-defined test case procedures
Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status
Possess strong knowledge of FedRAMP, GovRAMP, and NIST
Critical thinking, analytical, writing, and basic editing skills with the ability to write to FedRAMP’s level of detail
Qualifications:
Bachelor's degree or equivalent experience required; major in cybersecurity, information technology, or information systems preferred
Minimum of three years of experience in information security auditing, demonstrating a steady growth of skills & responsibility required
Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards
Working experience of information security as it relates to audit and compliance
CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+ certification or comparable IT security accreditation required
Excellent verbal and written communication skills
Proven commitment to providing exceptional client service (internal and external)
Ability to collaborate and work effectively across functions/departments/teams while building trusted relationships and positively influencing others
Strong attention to detail and accuracy. Strong analytical and creative problem-solving skills
Effective time management and organizational skills, proven ability to prioritize while simultaneously managing numerous projects/processes often under tight deadlines
Ability to travel as needed, approximately 25%
The compensation range for this role is $107,793 to $146,518. Actual compensation is influenced by a variety of factors including but not limited to skills, experience, qualifications, and geographic location.