FedRAMP Senior Assessor

Baker Tilly Advisory Group; Washington (District of Columbia); On-site; USD 110,000 - 170,000; Full time

Job summary

Baker Tilly Advisory Group, a leading advisory, risk and IT security firm, seeks a FedRAMP Senior Assessor in Washington, DC. You will lead advisory and assessment engagements, craft security evidence, and help clients meet FedRAMP requirements.

The role emphasizes strong communication, collaboration across teams, and deep knowledge of NIST controls, GovRAMP, and FedRAMP processes, with upward career opportunities.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, or information systems.
• Minimum of three years of experience in information security auditing.
• Working knowledge of NIST 800-53, FedRAMP, and risk management standards.
• CISA, CISM, CISSP or comparable accreditation preferred.
• Excellent verbal and written communication skills.
• Ability to collaborate and influence across functions and teams.

Responsibilities

• Be client-centric and lead advisory and assessment engagements.
• Conduct gap analyses and document results.
• Write system security plans, policies, and procedures.
• Evaluate evidentiary artifacts to meet FedRAMP controls.
• Assist in Security Assessment Plan and Report documentation.
• Interpret FedRAMP, GovRAMP, and NIST guidance for clients.

Skills

Information security auditing

Communication skills

Client engagement

Collaboration across teams

Education

Bachelor’s degree in cybersecurity / information systems

Job description

Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers - New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.

Are you interested in joining one of the fastest growing consulting and accounting firms in the country?

Would you like the ability to join a highly dynamic team focused on providing exceptional client service in the area of informational technology risk advisory?

If yes, consider joining Baker Tilly (BT) as a FedRAMP Senior Assessor! Our Risk Advisory practice provides a full spectrum of services to help our clients assess their risks, develop strategies to compete in an ever-changing business environment, and achieve their goals and objectives. All of this is accomplished through deep industry knowledge of risk, governance, internal audit, compliance, IT, and cybersecurity best practices.

As one of the fastest growing firms in the nation, BT has the ability to offer you upward career trajectory, flexibility in how and where you get your work done and meaningful relationships with clients, teammates and leadership who truly care about you and your development.

Responsibilities

• Be client-centric
• Lead advisory and assessment engagements
• Conduct gap analyses
• Write system security plans, policies, procedures, and other required documents
• Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control
• Document control test results based on FedRAMP-defined test case procedures
• Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
• Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status
• Possess strong knowledge of FedRAMP, GovRAMP, and NIST
• Critical thinking, analytical, writing, and basic editing skills with the ability to write to FedRAMP’s level of detail

Qualifications

• Bachelor’s degree or equivalent experience required; major in cybersecurity, information technology, or information systems preferred
• Minimum of three years of experience in information security auditing, demonstrating a steady growth of skills & responsibility required
• Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards
• Working experience of information security as it relates to audit and compliance
• CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+ certification or comparable IT security accreditation preferred
• Excellent verbal and written communication skills
• Proven commitment to providing exceptional client service (internal and external)
• Ability to collaborate and work effectively across functions/departments/teams while building trusted relationships and positively influencing others