FedRAMP & NIST Security Assessment Analyst

Fort Health; United States; Remote; USD 88,000 - 95,000; Full time

Job summary

Fortreum specializes in cloud and cybersecurity assessments, delivering FedRAMP, PCI, ISO, CMMC, and other frameworks for major cloud providers and Fortune 500 companies. The role focuses on FedRAMP, PCI, ISO, and NIST-based assessment activities with a strong emphasis on written deliverables and client collaboration.

You will work closely with the team to conduct interviews, perform tests, and document results, while maintaining quality and meeting project timelines.

Qualifications

• Bachelor’s degree or equivalent professional experience in relevant field.
• 2+ years of professional services experience in security assessments.
• 2+ years of assessment experience with NIST SP 800-53 in cloud environments.
• CYSA+ certification required.
• Proficient with Microsoft 365 suite.
• Ability to manage multiple priorities and meet deadlines.
• Strong written and verbal communication; client-facing skills.

Responsibilities

• Conduct stakeholder interviews and technical assessments.
• Perform technical tests alongside security engineers.
• Record meeting notes and maintain work papers.
• Document results with a consistent style across the team.
• Collaborate with delivery team to ensure client satisfaction and on-time deliverables.
• Ensure quality deliverables within allocated hours.
• Build positive relationships with clients and stakeholders.
• Pursue ongoing professional development and certifications.
• Travel to client locations for on-site professional services.

Skills

Analytical thinking

Relationship building

Multitasking

Adaptability

Education

Bachelor’s Degree

CYSA+ certification

Advanced certifications (AWS/GCP/MS)

Tools

Microsoft 365

JSON

Terraform

Job description

Fortreum specializes in cloud and cybersecurity assessments, delivering FedRAMP, PCI, ISO, CMMC, and other frameworks for major cloud providers and Fortune 500 companies. The role focuses on FedRAMP, PCI, ISO, and NIST-based assessment activities with a strong emphasis on written deliverables and client collaboration.

You will work closely with the team to conduct interviews, perform tests, and document results, while maintaining quality and meeting project timelines.