Senior Security Control Assessor – FedRAMP 3PAO
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior FedRAMP assessor leading cloud security compliance audits for Insight Assurance, a global cybersecurity and compliance audit firm. Evaluating NIST controls and mentoring assessment teams.
Responsibilities:
- Lead FedRAMP assessments from planning through reporting
- Produce SAP, SAR and RET deliverables for Rev5, KSI-based reporting for FedRAMP 20x, and GovRAMP RAR, SR-SAP and SR-SAR
- Test security capabilities and measurement systems behind Key Security Indicators, including code review, API testing and cloud architecture analysis
- Verify automated evidence runs at the stated cadence, covers the full scope and is reproducible
- Review and validate findings against the FedRAMP Criteria for Document Acceptance
- Include the required authorization recommendation in each SAR
- Sign off on assigned assessments and escalate quality, evidence or independence concerns to the Technical Manager
- Serve as the primary client contact for assessment communications
- Record disagreements and keep the assessment record separate from the provider’s
- Lead the assessment team with the Project Manager and maintain A2LA minimum staffing
- Mentor, supervise and evaluate Junior and Mid-Level Assessors
- Help deliver internal training
- File the After Action Report within 30 days of engagement end
- Support A2LA witnessing, surveillance and for-cause assessments
- Report conflicts of interest immediately
- Maintain independence by not designing or implementing remediation, providing advisory services or supporting sales for assessed clients
- Avoid assessing clients Insight Assurance advises or has advised and disclose prior CSP relationships
Requirements:
- Active Certified Information Systems Security Professional (CISSP)
- At least one additional active certification from the A2LA-approved list: CASP+ CE; GCED; GCIH; GSLC; CISA; CISM; CCSP; CISSP-ISSAP; CISSP-ISSEP; CISSP-ISSMP; CFR; CCISO
- If holding only the CISSP, completing the BCR Cyber activity after hire also satisfies the additional certification requirement
- Minimum five years of auditing and/or assessment experience in security compliance frameworks
- Experience leading assessment engagements or mentoring assessors
- Prior experience with FedRAMP, FISMA or NIST SP 800-53 assessments strongly preferred
- Prior 3PAO, GovRAMP, TX-RAMP or FedRAMP 20x experience preferred
- Deep knowledge of NIST SP 800-53 Rev5 and 800-53A, FedRAMP baselines and cloud security
- Working knowledge of AWS, Azure, GCP, Infrastructure-as-Code such as Terraform, CI/CD pipelines and API-based evidence collection
- Ability to read scripts, queries and IaC well enough to test automated validation
- Strong leadership, written and verbal communication, and analytical skills
- Ability to assess complex cloud systems and hold an independent position under client pressure
- Bachelor’s degree in Information Technology, Cybersecurity or a closely related field, or equivalent experience
Benefits:
- Flexible Paid Time Off and paid Holidays
- 100% Remote
- Competitive salary and benefits package
- Opportunities for professional growth and development
- Collaborative and innovative work environment
- Paid BCR Cyber exam and paid annual training
- A defined career path to Senior Manager, Federal Assessments
Similar Jobs
Senior Information Security Specialist
Senior Information Security Specialist advancing GRC, third-party risk, compliance, and incident readiness. Supporting Halcyon’s adaptive platform dedicated to stopping ransomware.
Junior Information Security and Privacy Consultant
Consultor de segurança da informação e privacidade apoiando assessments, avaliações de riscos e adequação a frameworks. Elaborando relatórios e recomendações para projetos de clientes diversos.
Security Impact Analysis Engineer
SIA Engineer supporting TSA information-system security impact analyses and RMF compliance. Evaluating cybersecurity risks, controls, architectures, and authorization documentation for Titan Technologies.
Senior Security Control Assessor, SCA
Senior Security Control Assessor supporting TSA’s cybersecurity governance, risk, and compliance mission. Evaluating security controls, authorization packages, vulnerabilities, and remediation activities.
Senior Cybersecurity Engineer, TS/SCI Clearance Required
ACAS cybersecurity engineer managing Nessus-based vulnerability assessment and DoD compliance. Supporting Air Operation Center cybersecurity, remediation, and incident reporting.
Head of Cyber Security
Head of Cyber Security leading cybersecurity strategy and governance for ABB’s global Process Control Platform. Protecting automation products through risk management, compliance, Linux and Kubernetes expertise.
Staff Product Security Engineer
Staff Product Security Engineer leading penetration testing across Guidewire’s cloud insurance platform. Securing web applications, APIs, SaaS architectures, and AI-powered product features.
Information Systems Security Officer
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.