Senior Assessor

Other Jobs To Apply

No other job posts for this day.

Work with a nationally ranked CPA and advisory firm that is passionate for what's next. Aprio has 30 U.S. office locations, one in the Philippines and more than 2,100 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio. Join Aprio's Risk Advisory and Assurance Services team and you will help clients maximize their opportunities. Aprio is a progressive, fast-growing firm looking for a Senior Assessor (CCA or LCCA) to join their dynamic team. The Senior Manager, IAS C3PAO leads the delivery and management of US Government cybersecurity compliance engagements which include but are not limited to CMMC, FedRAMP, GovRAMP, NIST RMF, CMS AE/DEE/EDE and NIST CSF. Engagements will be either Advisory or Assessment in nature. As an accredited FedRAMP 3PAO and an authorized CMMC C3PAO, the assessments will be official certification. This role involves both leadership and hands-on management of teams, ensuring technical rigor, operational excellence, and high client value. The successful candidate will be recognized as a subject‐matter expert in US Government cybersecurity controls, e.g, NIST 800-171 and NIST 800-53, associated compliance frameworks as listed above, and technologies used to implement and validate the controls IAW Government requirements. Position Responsibilities: Lead and manage projects (referred to as engagements): scoping, client readiness, assessment execution, report preparation, findings remediation (for advisory engagements), certification recommendations, and quality assurance to meet USG standards. Serve as primary point of contact for clients, senior stakeholders (CISO, VP Security, program managers), and regulators. Oversee and mentor a team of assessors, auditors, consultants, and technical experts, ensuring consistent methodology, quality of deliverables, and adherence to accreditation standards. Develop and implement program frameworks, playbooks, templates, and tools for efficient assessment deployment across client sites and systems. Identify and escalate risks, control gaps, and remediation pathways; collaborate with clients to develop Plans of Action & Milestones (POA&Ms) and track progress. Ensure continuous monitoring and compliance of client systems, supporting repeat assessments and beyond certification status. Partner with business development, capture, and proposal teams to build the practice, win new work, and expand service offerings in information assurance and cybersecurity. Maintain up-to-date awareness of regulatory standards and accreditation changes to the frameworks listed above, and integrate these changes into assessment/advisory thinking. Communicate complex technical findings and cybersecurity risks to non-technical leadership, providing actionable recommendations. Qualifications: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field (Master’s a plus). Minimum of 6+ years of experience in cybersecurity, information assurance, third-party assessments, or compliance (experience with other C3PAOs, assessor organization or consulting firm strongly preferred). Demonstrated experience managing assessment engagements under frameworks such as CMMC, NIST SP 800-171/800-53, FedRAMP, GovRAMP, NIST RMF, or similar. Strong technical understanding of cybersecurity controls, risk-based assessment methodologies, and audit criteria. Leadership experience managing teams, delegating work, mentoring staff and driving high performance. Excellent communication skills, with experience translating technical cyber and compliance issues into business-focused insights for senior leadership. Ability to travel (domestic and possibly international) to client sites for assessments or audits (travel % to be determined). Candidate will already have successfully undergone and completed the required DoD CMMC Tier 3 background investigation for immediate placement on assessments. Recognized LCCA or CCA (verifiable on CyberAB marketplace) OR recognized CCP with strong understanding and experience in RMF for DoD IT or FedRAMP/DISA’s FedRAMP+. Demonstrated ability to manage client engagements including project planning, overall delivery structure or methodology; ability to pivot if/when client’s business landscape drives project changes. Preferred Qualifications Experience with cloud environments (SaaS, IaaS, PaaS), DevSecOps, identity & access management, penetration testing or GRC toolsets. Previous experience in business development or growth of an assurance services practice. The application window is anticipated to close on 2/1/25 and may be extended as needed. Why work for Aprio: Whether you are just starting out, looking to advance into management or searching for your next leadership role, Aprio offers an opportunity to grow with a future-focused, innovative firm. Perks/Benefits we offer for full-time team members: - Medical, Dental, and Vision Insurance on the first day of employment - Flexible Spending Account and Dependent Care Account - 401k with Profit Sharing - 9+ holidays and discretionary time off structure - Parental Leave – coverage for both primary and secondary caregivers - Tuition Assistance Program and CPA support program with cash incentive upon completion - Discretionary incentive compensation based on firm, group and individual performance - Incentive compensation related to origination of new client sales - Top rated wellness program - Flexible working environment including remote and hybrid options What’s in it for you: - Working with an industry leader : Be part of a high-growth firm that is passionate for what’s next. - An awesome culture: Thirty-one fundamental behaviors guide our culture every day ensuring we always deliver an exceptional team-member and client experience. We call it the Aprio Way. This shared mindset creates lasting relationships between team members and with clients. - A great team: Work with a high-energy, passionate, caring and ambitious team of professionals in a collaborative culture. - Entrepreneurship : Have the freedom to innovate and bring your ideas to help us grow to become the CPA firm of choice nationally. - Growth opportunities : Grow professionally in an environment that fosters continuous learning and advancement. - Competitive compensation : You will be rewarded with competitive compensation, industry-leading benefits and a flexible work environment to enjoy work/life balance. EQUAL OPPORTUNITY EMPLOYER Aprio is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race; color; religion; national origin; sex; pregnancy; sexual orientation; gender identity and/or expression; age; disability; genetic information, citizenship status; military service obligations or any other category protected by applicable federal, state, or local law. Aprio, LLP and Aprio Advisory Group, LLC, operate in an alternative business structure, with Aprio Advisory Group, LLC providing non-attest tax and consulting services, and Aprio, LLP providing CPA firm services.

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...