Security Compliance SME

• 5+ yrs leading A&A for a FedRAMP or FISMA Moderate system through authorization and continuous monitoring.

• Demonstrated ownership of a FedRAMP significant change request, including direct 3PAO coordination (SAP scoping, evidence packages, test support, SAR adjudication).

• Expert authorship of SSP control implementation statements against the NIST SP 800-53 Rev 5 Moderate baseline.

• Security impact analysis, change type determination, and risk-based recommendations to an AO.