Senior Consultant

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Oversee system security evaluations within cloud environments in compliance with FedRAMP, FISMA, NIST SP 800-53, 800-37, OMB, and other authoritative guidelines for IT security.

• Provide leadership in project scheduling, sequencing, and resource allocation; aid in managing client expectations and executing project management tasks.

• Develop, review, and maintain supporting artifacts for IT security; offer guidance to Information System Owners regarding IT security matters.

• Identify challenges and issues related to information security, and research and create technical solutions to address them.

• Conduct interviews, execute, and assess procedures in line with FedRAMP standards and NIST SP 800-53A.

• Ensure compliance with cybersecurity policies and the implementation of necessary controls.

• Validate security documentation for information systems to confirm adherence to FedRAMP and NIST control criteria.

• Provide recommendations based on findings to enhance security postures in accordance with FedRAMP and NIST standards.

• Assist in reviewing and analyzing Security Authorization Packages for thoroughness and compliance with FedRAMP and NIST prerequisites.

• Engage in client interviews to conduct Security Assessments.

• Ensure that Security Authorization Packages for existing systems are consistently updated throughout their lifecycle.

• Foster a customer-centric relationship with clients.

• Collaborate with various internal teams to guarantee the effective delivery of results aligned with the project's scope.

• Create standards and procedures aimed at minimizing risks.

• Lead sessions with clients to ensure alignment of expectations, direction, and adherence to timelines.

• Exhibit the capability to guide projects through all phases of the project lifecycle from initiation to closure.

⛳️ Requirements

• 5-8 years of experience in auditing or consulting.

• In-depth knowledge of FedRAMP and NIST (in preferred order): FedRAMP, NIST SP 800-53, RMF, FISMA, NIST SP 800-171/CMMC.

• Exceptional written and verbal communication abilities, including the skill to clarify technical concepts to non-technical audiences.

• Comprehensive IT background with technical expertise in networks, protocols, security configurations, cryptography, identity and access management, and the systems development lifecycle.

• Strong communication skills, both written and verbal, with proficient presentation capabilities.

• Ability to engage with clients professionally and represent Emagine IT effectively.

• Capability to manage multiple tasks successfully.

• Serve as a mentor to Associate Security Consultants and Security Consultants on best practices.

• A collaborative team player who works effectively with others and is a self-starter able to operate with minimal supervision.

• Commitment to continually enhance and refine solid and comprehensive practices and processes.

• Required: Certified Information Systems Security Professional (CISSP).

• Additionally, must hold one (1) of the following certifications: CompTIA Advanced Security Practitioner (CASP+) Continuing Education (CE), GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Security Leadership (GSLC), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), CISSP-Information Systems Security Architecture Professional (CISSP-ISSAP), CISSP-Information Systems Security Engineering Professional (CISSP-ISSEP), CISSP-Information Systems Security Management Professional (CISSP-ISSMP), CyberSec First Responder (CFR), Certified Chief Information Security Officer (CCISO).

• Preferred: Certified FedRAMP Inspector: Baltimore Cyber Range (BCR) Certified.

• Must be certifiable within two (2) to three (3) months with training if BCR certification is not currently held.

🏝️ Benefits

• Health insurance.

• 401(k) matching.

• Flexible working hours.

• Paid time off.