The Manager, RAAS supports client delivery across CMMC Level 2 assessments and related cybersecurity frameworks. This individual will lead or serve as a strong second on assessments, ensuring high-quality, defensible results across all phases of delivery. The role requires the ability to move quickly, manage multiple engagements simultaneously, and interact effectively with stakeholders across executive, technical, and operational levels. This individual will play a key role in maintaining assessment quality, supporting practice growth, and contributing to the development of scalable assessment capabilities.
This position supports U.S. government and defense‑related clients. Certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet client‑defined access requirements for controlled environments. U.S. citizenship may be a requirement of obtaining a U.S. security clearance or meeting these access requirements. These requirements are only tied to this specific job posting. All Aprio employment decisions are made in accordance with applicable laws.
Position Responsibilities:
- Leveraging industry and technical expertise to assess risks and control implementation associated with client environments handling CUI.
- Leading or supporting all phases of CMMC assessment delivery including scoping, planning, evidence collection, testing, analysis, and reporting.
- Managing client interactions across multiple levels including executives, security teams, and system owners.
- Managing multiple concurrent client engagements including timelines, deliverables, and quality of work.
- Documenting assessment results with clear, defensible rationale aligned to assessment objectives.
- Evaluating control implementation across cloud and hybrid environments including AWS, Azure (Commercial, GCC, GCCH), and GCP.
- Reviewing workpapers, testing results, and draft reports to ensure completeness, accuracy, and consistency.
- Maintaining strict assessor independence while providing practical insight into control gaps and deficiencies.
- Supporting internal quality assurance processes and adherence to C3PAO requirements.
- Coaching and developing junior team members.
- Assisting with business development and growth of the CMMC practice as needed.
- Approximately 20–30% travel time required.
- Leading internal initiatives as necessary.
Qualifications:
- Active CMMC Certified Assessor (CCA) designation required.
- 5+ years of experience in cybersecurity assessment, audit, or compliance.
- Experience with NIST SP 800-171, NIST SP 800-53/RMF, or ISO 27001/2.
- Experience conducting or supporting formal (external) assessments such as CMMC, FedRAMP/GovRAMP, NIST 800-53, ISO 27001/2.
- Hands-on experience with cloud environments including AWS, Microsoft Azure (including GCC and GCCH), and Google Cloud Platform.
- Strong communication skills; verbal and written, with the ability to produce clear and defensible assessment documentation.
- Flexible, self-starter with the ability to operate in a fast-paced environment and manage multiple engagements simultaneously.
- Ability to interact with various levels of client and firm management.
- Ability to lead or support engagement teams, review work, and manage client relationships.
- Ability to train and develop team members.
- Ability and desire to assist with sales and growth of the practice.
- Strong project management skills including managing multiple clients and delivery timelines concurrently.
- 5+ years of experience in IT auditing, cybersecurity, or consulting.
- Undergraduate degree in Cybersecurity, Information Systems, Computer Science, or related field.
- Relevant industry certifications (e.g., CISSP, CISM, CISA) preferred.
Skills Required
- Active CMMC Certified Assessor (CCA) designation
- 5+ years of experience in cybersecurity assessment, audit, or compliance
- Undergraduate degree in Cybersecurity, Information Systems, or related field
- Hands-on experience with cloud environments including AWS and Microsoft Azure
Aprio Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Aprio and has not been reviewed or approved by Aprio.
-
Fair & Transparent Compensation — Pay is generally positioned as competitive and fairly paid across many roles, with clearer benchmarking helped by public job-posted ranges and compensation aggregators.
-
Healthcare Strength — Health, dental, and vision coverage is positioned as comprehensive and available from day one for full-time hires, which is stronger than the more typical waiting-period approach.
-
Retirement Support — Retirement offerings include a 401(k) with profit sharing and access to FSA/Dependent Care accounts, which can improve total rewards when firm performance supports contributions.
Aprio Insights
What We Do
Aprio is a premier CPA and business advisory firm that advises clients and associates on how to achieve what’s next. Aprio’s associates work as integrated teams across advisory, assurance, tax, outsourcing, staffing and private client services, bringing the best thinking and personal commitment to each client. Across practices, Aprio brings together proven expertise, deep understanding and strategic foresight for industries including Manufacturing and Distribution; Non-Profit and Education; Professional Services; Real Estate and Construction; Retail, Franchise and Hospitality; and Technology and Blockchain. Headquartered in Atlanta, Georgia, Aprio has grown to over 1,000+ team members. To serve clients wherever life or business may take them, Aprio’s teams speak more than 30 languages and work with clients in over 50 countries.
.png)
