3PAO Assessor - Cloud Security

About the role

Booz Allen is looking for a 3PAO Assessor to guide the development of cloud-based security architectures for some of the nation's most critical systems. Working with a global team, you will build a Cloud Accreditation Program for a client, then help operationalize its artifacts on site in Singapore through security control assessments.

Key responsibilities

• Help develop a Cloud Accreditation Program, including a Moderate impact security control baseline for the SaaS Cloud Service Offering (CSO), program policy, Security Requirements Guide (SRG), System Security Plan (SSP), Evidence Request List (ERL) and related templates.
• After client acceptance and handover, perform a security control assessment of the SaaS CSO using the Moderate impact baseline, document findings, analyze them, determine residual risk and present a risk report to the client.
• Serve as the team's primary representative for continuous monitoring and annual reassessment activities.
• Recommend tools and capabilities to support the risk management framework (RMF).

Required profile

• 5+ years of experience with control assessment in NIST SP 800-53r4/5, ISO/IEC 27001:2022 or SOC.
• 3+ years of experience with FedRAMP or CSA STAR.
• Ability to work in Singapore without sponsorship.
• Bachelor's degree.
• Cybersecurity Maturity Model Certification (CMMC) Level 2 Assessor, CCP, CCA or LCCA certification, Identity Statement, and on-camera availability for interviews and assessments.

Required skills

• NIST SP 800-53r4/5, ISO/IEC 27001:2022, SOC, FedRAMP or CSA STAR.
• CSSP, ISO 27001, ISO 17020 or CIS-ASP certification (nice to have).
• Nice to have: FedRAMP 3PAO experience and CMMC Level 2 assessor certifications.