FedRAMP Senior Assessor - IT Risk & Compliance Lead

Baker Tilly International; Washington (District of Columbia); Hybrid; USD 86,000 - 163,000; Full time

Job summary

Baker Tilly is seeking a FedRAMP Senior Assessor to join our Risk Advisory practice. You will lead advisory and assessment engagements for federal clients, focusing on information technology risk, governance, and cybersecurity in line with FedRAMP, GovRAMP and NIST standards.

With a focus on client service, you will conduct gap analyses, develop security plans, and document test results while collaborating across functions. Travel up to 25% is required.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity, information technology, or information systems.
• At least 3 years of information security auditing experience.
• Working knowledge of NIST 800-53, FedRAMP, and NIST RM controls.
• Experience in IT security as it relates to audit and compliance.
• Professional certifications such as CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, or CASP+ preferred.
• Excellent verbal and written communication; ability to work with clients and teams.
• Willingness to travel up to 25%.

Responsibilities

• Lead advisory and assessment engagements.
• Conduct gap analyses.
• Write system security plans, policies, procedures, and other required documents.
• Evaluate evidentiary artifacts and determine sufficiency for control testing.
• Document control test results per FedRAMP procedures.
• Assist in completing Security Assessment Plan/Report and Risk Exposure Table.
• Conduct stakeholder interviews and control walkthroughs to verify implementation.

Skills

Verbal communication

Written communication

Client service

Analytical thinking

Education

Bachelor's degree or equivalent experience

Job description

Baker Tilly is seeking a FedRAMP Senior Assessor to join our Risk Advisory practice. You will lead advisory and assessment engagements for federal clients, focusing on information technology risk, governance, and cybersecurity in line with FedRAMP, GovRAMP and NIST standards.

With a focus on client service, you will conduct gap analyses, develop security plans, and document test results while collaborating across functions. Travel up to 25% is required.