FedRAMP Senior Consultant

Baker Tilly International; Washington, Northern (District of Columbia, KY); On-site; USD 86,000 - 163,000; Full time

Job summary

Baker Tilly is seeking a security compliance professional to lead advisory engagements and perform FedRAMP/NIST-based assessments for government and public sector clients.

The role requires a 4-year degree, at least 3 years of information security auditing, and willingness to travel up to 25%. Remote-friendly with competitive compensation.

Qualifications

• 4 year degree required; 3 years of security auditing experience.
• Strong knowledge of FedRAMP, GovRAMP, and NIST standards.
• CISA, CISM, CISSP or similar certs preferred.

Responsibilities

• Be client-centric
• Lead advisory and assessment engagements
• Conduct gap analyses
• Write system security plans, policies, procedures, and other required documents
• Evaluate and assess evidentiary artifacts and conclude whether or not they meet control requirements
• Document control test results based on FedRAMP-defined test case procedures
• Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
• Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status

Skills

FedRAMP knowledge

NIST 800-53

Security auditing

Communication skills

Travel willingness

Education

4 year degree

Bachelor's degree preferred

Job description

Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.

Responsibilities

• Be client-centric
• Lead advisory and assessment engagements
• Conduct gap analyses
• Write system security plans, policies, procedures, and other required documents
• Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control
• Document control test results based on FedRAMP-defined test case procedures
• Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
• Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status
• Possess strong knowledge of FedRAMP, GovRAMP, and NIST Critical thinking, analytical, writing, and basic editing skills with the ability to write to FedRAMP’s level of detail

Minimum Required Qualifications

• 4 year degree
• Three (3) years of experience

Preferred Qualifications

• Bachelor's degree or equivalent experience required; major in cybersecurity, information technology, or information systems preferred
• Minimum of three years of experience in information security auditing, demonstrating a steady growth of skills & responsibility required
• Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards
• Working experience of information security as it relates to audit and compliance
• CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud+, CASP+ certification or comparable IT security accreditation preferred
• Excellent verbal and written communication skills
• Proven commitment to providing exceptional client service (internal and external)
• Ability to collaborate and work effectively across functions/departments/teams while building trusted relationships and positively influencing others
• Strong attention to detail and accuracy.
• Strong analytical and creative problem-solving skills
• Effective time management and organizational skills, proven ability to prioritize while simultaneously managing numerous projects/processes often under tight deadlines
• Ability to travel as needed, approximately 25%

Pay

The pay rate ranges for this position are listed below. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees. The national pay rate range is $85,910 to $162,890 In California: pay rate range is $102,000 to $162,890 #LI-LF2 #LI-remote

Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.

If you have a special request or need that requires accommodations to fully participate in interviewing or onboarding, please submit your request using the “Contact Us” feature on our Careers page. A member of our People Solutions team will follow up with you to discuss your specific needs.