RSI Security

Content Writer

• Read/parse RFPs, develop requirements matrices, and conduct research on requesting organizations
• Create clean, compelling proposals, statements of work, and RFI/SSN responses
• Take ownership of delegated RFPs throughout the proposal development/delivery lifecycle
• Help maintain/improve/develop proposal templates
• Research and understand current and new service offerings
• Ensure consistency in tone, voice, company mission, and brand
• Collaborate with graphic designers to identify opportunities for compelling graphics
• Coordinate with subject matter experts to obtain technical content
• Communicate effectively, efficiently, often

Proposal Writer

Security Engineer

• Lead and execute PCI DSS assessments
• Develop clear, structured reports documenting compliance status
• Guide clients in preparation for assessments
• Contribute to or lead the development and review of policies and procedures
• Support pre-sales activities by participating in client discussions

Information Security Assessor – QSA Certified

• Provide independent industry perspective on impartiality risks
• Review high and critical structural risks presented by management
• Assess whether commercial models could create undue influence
• Evaluate revenue concentration and market dependency risks
• Ensure industry credibility of certification and inspection decisions
• Challenge management where independence safeguards appear insufficient
• Participate in quarterly committee meetings

External Industry Risk & Security Governance Representative – ISO 17021, 17020, 42006

Risk

• Review High and Critical impartiality risks presented by management
• Evaluate structural independence safeguards and separation controls
• Challenge management where risk mitigation is insufficient
• Ensure no single interest predominates within assessment governance activities
• Escalate unresolved structural or independence risks to the Governing Authority
• Participate in periodic meetings (minimum quarterly)
• Provide independent perspective on federal cybersecurity assessment governance, impartiality, and oversight risks

External Federal Risk & Assessment Governance Subject Matter Expert

• Support cloud service providers in preparing for FedRAMP authorization through readiness assessments
• Perform Gap Assessments & Control Analysis
• Develop key deliverables such as System Security Plans (SSP), POA&Ms
• Translate NIST SP 800-53 control requirements into practical implementations within cloud environments
• Provide guidance on security architecture and control design
• Lead technical discussions and workshops with client stakeholders
• Contribute to RSI’s development of FedRAMP assessment methodologies

Proposal Writer

Information Security Assessor – QSA Certified

External Industry Risk & Security Governance Representative – ISO 17021, 17020, 42006

External Federal Risk & Assessment Governance Subject Matter Expert

FedRAMP Security Consultant