Senior FedRAMP Cloud Consultant
United StatesRemoteFull-time
AI Summary
Senior FedRAMP Cloud Consultant provides guidance on scope and security controls for FedRAMP engagements, leads assessments and audits, mentors team members, and helps clients improve their security posture across cloud and government compliance frameworks.
About this role
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Position Summary:
Coalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, IL with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
And we’re growing fast.
We’re looking for a self-starter Senior Consultant to join our FedRAMP Assessment team.
What You'll Do
What You'll Bring
- Bachelor's degree (four-year college or university) in IT or business, or equivalent combination of education and work experience
- Five to ten (5-10) years of experience as a consultant within professional IT services
- Must hold one of the following certifications: CISSP, CISA, CISM, CCSP, CFR, CCISO, GCED, GCIH, GSLC
- Deep experience with government compliance, including FISMA, FedRAMP, and DoD RMF
- Strong knowledge of NIST Special Publications 800-30, 800-37, 800-53, 800-171
- Experience with every step within the delivery of Certification and Accreditation (C&A) / Assessment and Authorization (A&A) packages that have obtained and maintained full authorization to operate (ATO)
- Experience with virtualization or cloud technologies
- Familiarity with statutes and regulations across multiple industries relevant to IT (e.g. SOX 404, HIPAA, FedRAMP, GLB, Patriot Act)
- Familiarity with the Canadian Centre for Cyber Security Protected B framework is a plus
- Familiarity with the DOD CMMC process is a plus
- Demonstrated knowledge of AWS, Asure and GCP cloud offerings is required
- Knowledge of information security related solutions, tools, and utilities
- Excellent verbal and written skills
- Willing to travel up to 20%
Bonus Points
Skills
Assessment ReportsAudit PlanningC&A / A&A LifecycleCISSP/CISA/CISM/CCSP/CFR/CCISO/GCED/GCIH/GSLC (certifications)Cloud Platforms (AWS, Azure, GCP)Compliance GovernanceFedRAMPFISMAGRC ToolingInformation Security FrameworksInterview And Evidence CollectionNIST SP 800-171NIST SP 800-30NIST SP 800-37NIST SP 800-53Risk AssessmentSecurity Posture AssessmentSOC 2 (implied Governance)Virtualization
