TestPros
FedRAMP Subject Matter Expert
Job Summary
This role involves providing expert guidance on FedRAMP compliance and NIST standards to clients preparing for cloud security assessments. The candidate will conduct gap assessments, develop remediation plans, and assist with documentation for security authorization. Key responsibilities include technical recommendations, mock audits, and collaboration with account managers for project success. The position emphasizes project management, compliance expertise, and effective communication in a remote, part-time capacity.
Required Skills
Benefits
Job Description
Company Overview:
TestPros is a successful and growing business, established in 1988 to provide Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities include Program Management, Program Oversight, Process Audit, Intelligence Analysis, Cyber Security, NIST 800-53, NIST SP 800-171 / CMMC Consulting/Assessment/Compliance, PCI Compliance, Zero Trust, Resiliency, Computer Forensics, Software Supply Chain Assurance, Software Testing, Test Automation, Section 508 and WCAG Accessibility Assessment and Remediation, Localization Testing, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services. TestPros is an Equal Opportunity Employer.
Job Summary:
Location: Remote
Job Type: Part-Time Consultant
Job Description:
We are seeking a skilled FedRAMP Subject Matter Expert (SME) to support our commercial clients in preparing for Third-Party Assessment Organization (3PAO) audits. The ideal candidate will have a deep understanding of FedRAMP requirements, NIST standards, and experience in guiding organizations through the FedRAMP authorization process.
Key Responsibilities:
- Consultation and Guidance:
- Advise clients on FedRAMP requirements and compliance strategies.
- Conduct gap assessments and develop remediation plans.
- Assist in implementing security controls per FedRAMP and NIST SP 800-53 standards.
- Documentation and Preparation:
- Help clients develop and refine required documentation (SSP, Policies, Procedures).
- Prepare clients for 3PAO assessments with mock audits and readiness reviews.
- Technical Assistance:
- Provide recommendations for security controls in cloud environments.
- Ensure technical solutions align with security policies and standards.
- Pre-Sales Support:
- Participate in pre-sales calls with potential clients.
- Provide technical expertise and collaborate with account managers on proposals.
- Collaboration and Project Management:
- Work with account managers to ensure client satisfaction and successful project outcomes.
- Manage project plans, ensuring timely completion of milestones and deliverables.
- Bachelor’s degree in IT, Cybersecurity, or related field.
- Relevant certifications (CISSP, CISM, CISA, PMP).
- Minimum of 5 years in IT security, focusing on cloud security and compliance.
- In-depth knowledge of FedRAMP, NIST SP 800-53, and cloud security principles.
- Excellent communication, project management, and analytical skill
Benefits
TestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees.
TestPros, Inc. is an Equal Opportunity Employer.
EEO Statement
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, marital status, age, national origin, or protected veteran status.
TestPros
Since 1988, TestPros has provided leading IT compliance services to both government & commercial clients, ensuring regulatory adherence.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.