FedRAMP Senior Assessor - IT Risk & Compliance Expert

Baker Tilly; San Diego (CA); On-site; USD 102,000 - 163,000; Full time

Job summary

Baker Tilly is seeking a FedRAMP Senior Assessor to join its rapidly expanding Risk Advisory team in California. You will lead advisory and assessment engagements, write security documentation, and apply NIST and FedRAMP frameworks to client environments.

This role offers exposure to a broad client base in federal and commercial sectors, opportunities for professional growth, and collaboration with senior leaders across the firm. Travel up to 25% is possible.

Qualifications

• Bachelor’s degree or equivalent experience; cybersecurity/IT-related preferred.
• Minimum of three years in information security auditing with increasing responsibility.
• Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management standards.
• CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+ certification or comparable IT security accreditation preferred.

Responsibilities

• Be client-centric.
• Lead advisory and assessment engagements.
• Conduct gap analyses.
• Write system security plans, policies, procedures, and other required documents.
• Evaluate and assess evidentiary artifacts and conclude whether they are sufficient to meet control requirements.
• Document control test results based on FedRAMP-defined procedures.
• Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table.
• Conduct stakeholder interviews, security boundary discussions, and control walkthroughs with clients to verify control implementation status.
• Possess strong knowledge of FedRAMP, GovRAMP, and NIST.

Skills

FedRAMP knowledge

NIST controls

Information security auditing

Client service excellence

Governance & risk

Education

Bachelor's degree or equivalent experience

Job description

Baker Tilly is seeking a FedRAMP Senior Assessor to join its rapidly expanding Risk Advisory team in California. You will lead advisory and assessment engagements, write security documentation, and apply NIST and FedRAMP frameworks to client environments.

This role offers exposure to a broad client base in federal and commercial sectors, opportunities for professional growth, and collaboration with senior leaders across the firm. Travel up to 25% is possible.