Independent Security & Privacy Assessment Lead

Required Qualifications
Education
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Security, Risk Management, or related discipline, or equivalent relevant professional experience.

Professional Experience
The consultant should demonstrate senior-level independent security and privacy assessment experience, particularly:
Experience conducting independent security assessments.
Experience conducting independent privacy assessments.
Experience with ARC-AMPE.
Experience with NIST SP 800-53 Rev. 5.
Experience assessing complex cloud-based environments.
Experience assessing systems processing confidential/sensitive information.
Experience evaluating security controls.
Experience identifying security weaknesses and vulnerabilities.
Experience developing risk-based remediation recommendations.
Experience preparing formal security assessment reports.
Experience preparing CMS assessment documentation.
Experience preparing or contributing to the Security Assessment Workbook (SAW).
Experience supporting annual compliance and authorization activities.

Preferred Certifications:
CISA- Security audit and assessment
CISSP- Broad information security expertise
CAP / CGRC- Security authorization, governance and risk
Relevant NIST / Federal Assessment Credentials- Control assessment and authorization
Cloud Security Certification- Assessment of cloud-based environments