You Are:

The Cyber SCRM Cloud Assessor role will work in the Cyber SCRM team in the CISO organization. We are seeking a Risk Assessor with expertise in the Cloud Service Providers and Services.

 Responsibilities Include:

• You will be responsible for conducting thorough risk assessments of cloud service offerings (CSOs) in accordance with FedRAMP baselines and if not FedRAMP, equivalence to NIST 800-171, any adherence with Cloud Security Alliance (CSA) CAIQ, SOC2, ISO 27001, and other standards.
• Perform risk management assessments to include, but not limited to, meeting with business users, sending questionnaires and reviewing vendor responses, reviewing external vulnerability assessments, reviewing security and compliance documentation, customer shared responsibility matrix, vendor risk reports, policy and program evaluations, analyzing supply chain risks, and working w/ cross-functional risk and compliance SMEs.
• Review for Open-Source Software licenses as applicable.
• Understand and pivot risk measures in accordance with gov't policy. Write up assessment results, and QA other's reports.

Here's What You Need:

• US Citizen required.
• 3 years of relevant progressive experience in IT, cybersecurity, risk, or other disciplines
• Familiarity with various security-related NIST publications (e.g., SP 800-53r5, SP 800-53A, SP 800-18r1, etc.)
• Experience supporting federal IT organizations in accomplishing assessments, accreditations.
• Familiarity with ServiceNow, Office Suite,
• Strong communication skills.
• Ability to work independently.
• 1 year of experience in Security Risk Management
• Currently hold or could obtain Azure AZ-900/AWS Cloud Certified Practitioner/AWS Solution Architect Associate

Bonus Points if you have:

• Knowledge in Cloud Services Management
• Knowledge in Cloud Governance Management and supporting Implementation.