Senior FedRAMP Consultant

Responsibilities

• Lead audits and assessments, including audit plan preparation, documentation review, and client interviews
• Prepare, review, and approve assessment reports to ensure high-quality deliverables
• Provide expert advice to customers regarding cybersecurity compliance and scope of work
• Manage project priorities, tasks, and hours to achieve delivery targets
• Mentor team members in areas of audit, assessment, technical review, and writing
• Draft audit programs that address regulatory objectives and client environment complexity
• Assess security vulnerabilities against appropriate security frameworks
• Interface with clients throughout the entire engagement, interacting with all levels of client organizations

Requirements

• Bachelor's degree in IT, business, or an equivalent combination of education and experience
• 5-10 years of experience in professional IT consulting services
• One of the following certifications: CISSP, CISA, CISM, CCSP, CFR, CCISO, GCED, GCIH, or GSLC
• Deep experience with government compliance frameworks including FISMA, FedRAMP, and DoD RMF
• Strong knowledge of NIST Special Publications 800-30, 800-37, 800-53, and 800-171
• Experience with A&A/C&A packages and obtaining/maintaining Authorization to Operate (ATO)
• Demonstrated knowledge of AWS, Azure, and GCP cloud offerings
• Willingness to travel up to 20%

Preferred Qualifications

• Cloud Security focused certifications such as AWS, Azure, or CCSK
• Familiarity with the Canadian Centre for Cyber Security Protected B framework
• Familiarity with the DOD CMMC process

Benefits

• Flexible work model options
• Paid parental leave
• Flexible time off
• Certification and training reimbursement
• Digital mental health and wellbeing support membership
• Comprehensive insurance options

About the Company

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and help companies navigate the ever-changing cybersecurity landscape. We are a team of passionate problem-solvers, thought leaders, and cybersecurity experts dedicated to making a difference.