Remote Senior FedRAMP Security Consultant

Baker Tilly Advisory Group, LP; Washington (District of Columbia); On-site; USD 86,000 - 163,000; Full time

Job summary

Baker Tilly Advisory Group, LP in Washington, DC is seeking a cybersecurity information security auditor to support FedRAMP and GovRAMP engagements. You will assess controls, write security documentation, and coordinate with clients to ensure compliance with NIST standards.

The role requires at least 4 years of information security auditing experience and the ability to travel up to 25%. Excellent written and verbal communication skills are essential.

Qualifications

• 4 year degree.
• Three (3) years of information security auditing experience.
• Strong knowledge of FedRAMP, GovRAMP and NIST standards.
• Experience with FedRAMP controls and audit methodologies.
• Excellent written and verbal communication skills.
• Ability to travel up to 25%.

Responsibilities

• Be client-centric
• Lead advisory and assessment engagements
• Conduct gap analyses
• Write system security plans, policies, procedures, and other required documents
• Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control
• Document control test results based on FedRAMP-defined test case procedures
• Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
• Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status
• Possess strong knowledge of FedRAMP, GovRAMP, and NIST standards in audit and compliance practices

Skills

FedRAMP knowledge

NIST controls

Audit & compliance

Communication skills

Travel readiness

Education

Bachelor's degree in cybersecurity/ IT/ IS

Job description

Baker Tilly Advisory Group, LP in Washington, DC is seeking a cybersecurity information security auditor to support FedRAMP and GovRAMP engagements. You will assess controls, write security documentation, and coordinate with clients to ensure compliance with NIST standards.

The role requires at least 4 years of information security auditing experience and the ability to travel up to 25%. Excellent written and verbal communication skills are essential.