💼 About This Role

You'll work as part of a team assessing client security and compliance against FedRAMP, NIST 800-53, and other frameworks. You will lead interviews, inspect evidence, and draft audit reports to help clients navigate cybersecurity challenges.

🎯 What You'll Do

• Lead interview and inquiry walkthroughs with clients to determine conformity.
• Draft audit observations addressing regulatory objectives and client environment.
• Assess client documentation for compliance with security frameworks.
• Prepare and review assessment reports, educate clients on compliance.

📋 Requirements

• 2-3 years of IT industry experience with NIST Special Publications 800-37 Rev 2, 800-53 Rev 5, and 800-53A Rev 5.
• Technical understanding of NIST 800-53 Rev 5 control families (AT, CA, CM, etc.).
• Ability to lead testing sessions and independently research technical topics.
• Hold one of specified certifications: CISSP, CISA, CySA+, etc.

✨ Nice to Have

• Expertise in other security frameworks (SOC 2, ISO, HIPAA, HITRUST, PCI).
• Experience with cloud environments (AWS, Azure, GCP).
• Knowledge of Nessus or networking components.

🎁 Benefits & Perks

• 🏖️ Remote work flexibility
• 📈 Professional development support for certifications
• ✈️ Travel up to 20%
• 🏢 Collaborative team environment

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager Interview· 45 min