Cloud Assessment Analyst II
Core
Applies and evaluates the Risk Management Framework for cloud-based providers to ensure security of organizational systems and information assets.
Role type
Mid-level security analyst (cloud compliance)
Builds
Secure cloud environments compliant with FedRAMP and data protection laws
Domain
Federal government contracting / Cloud security
Required skills
Risk Management Framework (RMF) evaluation, Cloud security auditing, Compliance with data protection laws, Security guideline development, Non-compliant environment migration, Policy meeting attendance, Technical architecture design, System function identification, Customer and leadership presentation, Team technical guidance
Preferred skills
IAM/IAT II certification, Top Secret/SCI clearance eligibility
Technologies
FedRAMP, Cloud platforms
Responsibilities
Applies and evaluates the Risk Management Framework to cloud based providers and their offerings. Responsible for ensuring the security of the organization's systems and information assets. Conducts audits and risk assessments. Evaluates internal operations and controls and makes recommendations based on the findings. Migrates non-compliant environments to compliant environments. Ensures compliance with data protection guidelines and applicable laws. Attends mid-level policy and requirements meetings on behalf of Customers and FedRAMP. Provides guidance to both government and contract personnel on potential policy changes. Performs as architect and designs solutions for technical opportunities and problems.
Seniority
Mid-level, hands-on IC
