FedRAMP Senior Assessor

At Moss Adams, we champion authenticity. For us, that means fostering a culture of talented people who care—about you, about our clients, and about our communities. Here, you’ll work towards our mission of empowering others to embrace opportunity, growing as a leader along the way. Our firm’s size, middle-market clients, customized career paths, and supportive culture make this a reality. Join a values-driven firm where you’ll have fun while solving complex and interesting business challenges.

Introduction to the team

Moss Adams Cybersecurity Consulting is a leader in providing IT security and compliance services to middle market companies and organizations. Our team is made up of cybersecurity specialists who come from business, IT, and consulting backgrounds to assist our clients with a diverse set of needs, including network and web application penetration testing, data security regulation compliance, disaster recovery planning, and strategic technology planning. We’re looking for FedRAMP and GovRAMP Advisors and Assessors to join our team to consult and assess cloud service providers for FedRAMP, FedRAMP 20X, GovRAMP, FISMA, NIST, CMMC, or other related projects. Come join us and be part of a dynamic and growing team

Individuals who thrive at Moss Adams exhibit the following success skills – Collaboration, Critical Thinking, Emotional Intelligence, Executive Presence, Growth Mindset, Intellectual Curiosity, and Results Focus.

Responsibilities

• Be client-centric
• Lead advisory and assessment engagements
• Conduct gap analyses
• Write system security plans, policies, procedures, and other required documents
• Evaluate and assess evidentiary artifacts and conclude whether or not they are sufficient to meet control
• Document control test results based on FedRAMP-defined test case procedures
• Assist in completing the Security Assessment Plan, Security Assessment Report, and Risk Exposure Table
• Conduct stakeholder interviews, security boundary discussions, control walkthroughs with clients to verify control implementation status
• Possess strong knowledge of FedRAMP, GovRAMP, and NIST
• Critical thinking, analytical, writing, and basic editing skills with the ability to write to FedRAMP’s level of detail
  
  

Qualifications

• Bachelor's degree or equivalent experience required; major in cybersecurity, information technology, or information systems preferred
• Minimum of three years of experience in information security auditing, demonstrating a steady growth of skills & responsibility required
• Working knowledge of NIST 800-53 controls, FedRAMP requirements, and NIST risk management and security standards
• Working experience of information security as it relates to audit and compliance
• CISA, CISM, CISSP, GCED, GSLC, CCSP, CompTIA Cloud , CASP certification or comparable IT security accreditation required
• Excellent verbal and written communication skills
• Proven commitment to providing exceptional client service (internal and external)
• Ability to collaborate and work effectively across functions/departments/teams while building trusted relationships and positively influencing others
• Strong attention to detail and accuracy. Strong analytical and creative problem-solving skills
• Effective time management and organizational skills, proven ability to prioritize while simultaneously managing numerous projects/processes often under tight deadlines
• Ability to travel as needed, approximately 25%
  
  

Moss Adams is an Equal Opportunity Employer as to all protected groups, including protected veterans and individuals with disabilities.

Moss Adams complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact careers@mossadams.com.

Certain jurisdictions in the United States require employers to disclose the pay range in job postings. This is the typical range of pay for the position. Actual compensation may depend on factors such as qualifications, work experience, skills, and geographic location. This position may be eligible for an annual discretionary bonus. For more information about our benefit offerings and other total rewards, visit our careers page.

Employee Status

Regular