Senior Security Control Assessor – FedRAMP 3PAO

🔥 2 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Insight Assurance

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

📋 Compliance

🔒 Cybersecurity

💼 Consulting

Compliance • Cybersecurity • Consulting

Insight Assurance is a professional compliance and security assessment firm that helps organizations stay audit-ready and compliant with evolving regulations. They deliver independent audit and security services including SOC examinations (SOC 1/2/3), ISO certifications (ISO/IEC 27001 family), PCI DSS, HITRUST, HIPAA/HITECH, FedRAMP, CMMC, NIST frameworks, GDPR/CCPA privacy assessments, penetration testing, and remediation and readiness support. The company emphasizes tech-driven efficiency (automation and AI-driven workflows), is led by former Big 4 auditors, and serves startups, mid-market businesses, and enterprise organizations globally with tailored, expert compliance and advisory services.

📋 Description

• Lead FedRAMP assessments from planning through reporting • Produce SAP, SAR and RET deliverables for Rev5, KSI-based reporting for FedRAMP 20x, and GovRAMP RAR, SR-SAP and SR-SAR • Test security capabilities and measurement systems behind Key Security Indicators, including code review, API testing and cloud architecture analysis • Verify automated evidence runs at the stated cadence, covers the full scope and is reproducible • Review and validate findings against the FedRAMP Criteria for Document Acceptance • Include the required authorization recommendation in each SAR • Sign off on assigned assessments and escalate quality, evidence or independence concerns to the Technical Manager • Serve as the primary client contact for assessment communications • Record disagreements and keep the assessment record separate from the provider’s • Lead the assessment team with the Project Manager and maintain A2LA minimum staffing • Mentor, supervise and evaluate Junior and Mid-Level Assessors • Help deliver internal training • File the After Action Report within 30 days of engagement end • Support A2LA witnessing, surveillance and for-cause assessments • Report conflicts of interest immediately • Maintain independence by not designing or implementing remediation, providing advisory services or supporting sales for assessed clients • Avoid assessing clients Insight Assurance advises or has advised and disclose prior CSP relationships

🎯 Requirements

• Active Certified Information Systems Security Professional (CISSP) • At least one additional active certification from the A2LA-approved list: CASP+ CE; GCED; GCIH; GSLC; CISA; CISM; CCSP; CISSP-ISSAP; CISSP-ISSEP; CISSP-ISSMP; CFR; CCISO • If holding only the CISSP, completing the BCR Cyber activity after hire also satisfies the additional certification requirement • Minimum five years of auditing and/or assessment experience in security compliance frameworks • Experience leading assessment engagements or mentoring assessors • Prior experience with FedRAMP, FISMA or NIST SP 800-53 assessments strongly preferred • Prior 3PAO, GovRAMP, TX-RAMP or FedRAMP 20x experience preferred • Deep knowledge of NIST SP 800-53 Rev5 and 800-53A, FedRAMP baselines and cloud security • Working knowledge of AWS, Azure, GCP, Infrastructure-as-Code such as Terraform, CI/CD pipelines and API-based evidence collection • Ability to read scripts, queries and IaC well enough to test automated validation • Strong leadership, written and verbal communication, and analytical skills • Ability to assess complex cloud systems and hold an independent position under client pressure • Bachelor’s degree in Information Technology, Cybersecurity or a closely related field, or equivalent experience

🏖️ Benefits

• Flexible Paid Time Off and paid Holidays • 100% Remote • Competitive salary and benefits package • Opportunities for professional growth and development • Collaborative and innovative work environment • Paid BCR Cyber exam and paid annual training • A defined career path to Senior Manager, Federal Assessments

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume