Security Control Assessor

Role overview

Support federal system security authorization and ongoing assessment work under the Risk Management Framework. The role focuses on reviewing evidence, preparing and maintaining authorization packages, and coordinating with system owners and security stakeholders so that assessments, renewals, and audit responses are complete and on schedule. The position is remote and contingent on customer approval.

Responsibilities

- Review system artifacts and security documentation for accuracy and completeness in support of Authority to Operate packages. - Help develop, update, and maintain authorization materials, including System Security Plans, Privacy Impact Assessments, risk assessments, contingency plans, and Plans of Action and Milestones. - Support continuous monitoring and ongoing authorization by reviewing controls and assessment evidence. - Track authorization and renewal dates and coordinate with system owners, ISSOs, and other stakeholders to keep renewals moving. - Maintain assessment and audit records in CSAM or another designated governance, risk, and compliance system. - Coordinate stakeholder input for audits and data calls, and review closed corrective action plans for completeness and compliance.

Requirements

- Bachelor’s degree, 3–5 years of related experience, and an industry professional certification. - Experience with the NIST Risk Management Framework, federal system authorization, and ATO processes. - Working knowledge of NIST SP 800-53 controls and federal cybersecurity requirements. - Experience reviewing or preparing authorization documentation such as SSPs, PIAs, risk assessments, POA&Ms, and ATO packages. - Familiarity with continuous monitoring and cybersecurity GRC tools such as CSAM. - Strong organization, analysis, problem solving, and written and verbal communication skills; able to work independently and with cross functional teams. - U.S. citizenship and ability to obtain a High Risk Public Trust clearance.

Nice to have

- Active Secret or Top Secret clearance.

Benefits and work setup

- Remote work with a flexible work environment. - Medical plan options, including HMO and high deductible plans, plus HSA and FSA options, dental and vision coverage, disability and life insurance, floating federal holidays, and a 401(k) match. - Paid time off and incentives for earning certifications aligned with business needs.