Security Control Assessor

This is a fully remote position, open to applicants in District of Columbia, +2 more states.

📋 Description

• Assist in Security Authorization (SA) and Ongoing Security Authorization (OSA) tasks in alignment with the Risk Management Framework (RMF).

• Evaluate security documentation and system artifacts to ensure they are accurate and complete for Authority to Operate (ATO) packages.

• Aid in the creation, review, and upkeep of ATO packages prior to their submission for approval.

• Analyze and contribute to Security Standard Plans (SSPs), Privacy Impact Assessments (PIAs), Risk Assessments, contingency plans, and Plans of Action and Milestones (POA&Ms).

• Support continuous monitoring and ongoing authorization efforts, including the review of security controls and assessment documentation.

• Monitor ATO and security authorization renewal timelines and collaborate with System Owners, Information System Security Officers (ISSOs), and other stakeholders.

• Review closed POA&Ms for thoroughness and adherence to compliance standards.

• Maintain audit and assessment documentation within the Cyber Security Assessment Management (CSAM) system or other designated Governance, Risk, and Compliance (GRC) tools.

• Assist in audit, compliance, and data call responses by liaising with relevant stakeholders.

• Contribute to the creation and maintenance of security authorization processes, procedures, and documentation.

⛳️ Requirements

• Bachelor’s degree along with 3-5 years of relevant experience.

• Possession of an industry-recognized professional certification.

• Experience in supporting the NIST Risk Management Framework (RMF) and system authorization/ATO processes.

• Familiarity with NIST SP 800-53 security controls and federal cybersecurity mandates.

• Experience in reviewing or formulating SSPs, PIAs, Risk Assessments, POA&Ms, and ATO packages.

• Background in supporting continuous monitoring or ongoing authorization activities.

• Knowledge of cybersecurity GRC tools such as CSAM or equivalent platforms.

• Strong analytical, organizational, and problem-solving abilities.

• Excellent written and verbal communication skills with both technical and non-technical audiences.

• Capability to work autonomously and collaboratively within a cross-functional team.

• Must be a U.S. citizen.

• Eligibility to obtain a High Risk Public Trust Security Clearance.

• Active Secret or Top Secret security clearance is preferred.

🏝️ Benefits

• Certification incentive program.

• Paid Time Off (PTO).

• Options for floating federal holidays.

• Health Maintenance Organization (HMO) insurance options.

• High Deductible Health Plans with Health Savings Accounts (HSAs).

• Flexible Spending Accounts (FSAs).

• Comprehensive Dental Plans.

• Vision insurance coverage.

• Short-term and long-term disability insurance.

• Life insurance protection.

• 401k matching program.

• Flexible work environment.

• Recognition and rewards for professional development and obtaining new certifications.

• Team-oriented collaborative culture.

• Flexibility to balance work and personal commitments.