Security Controls Assessor

Job Summary

To support future projects, the part-time remote Security Controls Assessor will conduct independent security control compliance assessments using NIST guidelines and OSCAL, focusing on both U.S. Government and Commercial environments.

Key responsibilities

• Conduct independent security control compliance assessments and develop associated documentation such as Security Assessment Plans and Reports
• Utilize OSCAL for assessment automation and ensure compliance with security standards
• Collaborate with cross-functional teams to address security requirements and produce actionable technical reports

Required qualifications

• Proven experience with OSCAL (minimum of two years)
• At least 5 years of hands-on experience in security controls assessment and development of related documentation
• Experience with tools such as RegScale or Paramify
• Background in government or public sector IT environments is highly preferred
• Full U.S. Citizenship and ability to pass an extensive background check