Security Compliance SME

Required Skills

• 5+ yrs leading A&A for a FedRAMP or FISMA Moderate system through authorization and continuous monitoring.
• Demonstrated ownership of a FedRAMP significant change request, including direct 3PAO coordination (SAP scoping, evidence packages, test support, SAR adjudication).
• Expert authorship of SSP control implementation statements against the NIST SP 800-53 Rev 5 Moderate baseline.
• Security impact analysis, change type determination, and risk-based recommendations to an AO.