Job Description

Job Description

Job Description

Description:

We are looking for a full-time (exempt) consultant on our Managed Programs and Security Consulting (MPSC) Practice with experience helping either external or internal organizations map, implement, and maintain FedRAMP program. The consultant will specialize in supporting clients and CSPs through full ATO lifecycle and provide the advisory service necessary to help us build out our emerging Security Compliance-as-a-Service product in our MPSC Practice. This position will report to a Manager.

In this role, you will:

• Collaboratively in teams of typically 1-2 consultants to deliver higher-level service and value to our customers
• Be the team lead and client relationship owner on FedRAMP engagements
• Deliver consulting service engagements as assigned, following risk3sixty standards, risk3sixty defined work processes, templates, and fullCircle software
• Develop information security policies, standards, plans, procedures, and other documentation to support the client adopted framework and industry standard
• Delivery projects to build out compliance roadmaps, architecture guidance, gap remediation, etc.
• Prepare and deliver thoughtful, insightful, and professional presentations to customers and internal risk3sixty stakeholder

Education and Experience

• Bachelor’s degree or + 5 years of experience performing or participating in implementing and executing cloud security controls in accordance with NIST SP 800-53 Rev 5
• Must be authorized to work in the U.S.
• Strong knowledge of the NIST Special Publications 800-30, 800-37, 800-53
• Experience supporting CSPs or organizations through full ATO lifecycle.
• Developing knowledge of cloud infrastructures and security configurations (AWS, Azure, GCP)
• Moderate technical expertise and competency in network security, security operations, security architecture, infrastructure security, and identity and access management.
• Familiar with the delivery of Certification and Accreditation (C&A) / Assessment and Authorization (A&A) packages that have obtained and maintained full authorization to operate (ATO)
• Strong verbal and written skills are required in the documentation of Gaps/Risks as they apply to the assessment
• Proven strong project management, effective writing skills and communication skills

Bonus Points : ISO 27001:2013/2022 Lead Implementer, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM)

Physical Requirements

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift to 10 pounds at times.

Disclaimer: Risk3sixty reserves the right to change job duties at any time and the job description is not designed to cover every requirement of this job.

Risk3sixty provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Job Tags

Similar Jobs