Required Qualifications
Education
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Security, Compliance, Risk Management, or related discipline, or equivalent relevant professional experience.
Professional Experience
5+ years of experience in cybersecurity compliance, security assessment, GRC, audit, security documentation, or related fields.
Experience supporting security-control assessments.
Experience developing or maintaining assessment documentation.
Experience with evidence management and control traceability.
Experience preparing security assessment reports.
Experience maintaining compliance documentation.
Experience working with GRC or assessment-management tools.
Experience with regulated environments preferred.
Experience supporting cloud-security assessments preferred.
Experience with CMS or federal security documentation desirable.
Required Knowledge
The consultant should demonstrate knowledge of:
Security control assessment
Security compliance
GRC
ARC-AMPE
NIST SP 800-53 Rev. 5
CMS security requirements
Evidence management
Control mapping
Assessment workpapers
Findings management
Corrective-action tracking
Security assessment reporting
Security Assessment Workbook
Data protection
Privacy controls
Cloud security concepts
Security risk management
Preferred Certifications:
CISA- Audit and assessment
CGRC- Governance, risk and compliance
CAP-Security assessment/authorization
CISSP- Broad security knowledge
Relevant CMS/NIST Training- Assessment and compliance activities
Never miss an opportunity! Create an alert based on the job you applied for.