Security Controls Assessor

Job Summary

To support upcoming projects in late 2026 or 2027, the part-time remote Security Controls Assessor will conduct risk management assessments for U.S. Federal and commercial clients, focusing on NIST, RMF, and FISMA compliance frameworks while developing security documentation and reports.

Key responsibilities

• Develop NIST 800-53 Rev 5 based System Security Plans (SSP) and Security Assessment Reports (SAR)
• Verify and document the implementation of security controls and facilitate the Plan of Actions and Milestones (POA&M) program
• Produce detailed security-related reports and maintain knowledge of the threat landscape through monitoring threat intelligence

Required qualifications

• 5+ years of experience in IT security compliance, specifically with NIST 800-53 Rev 5
• Bachelor's Degree in Computer Science or a related technical discipline, or equivalent experience
• Experience in cloud computing security and security governance
• Proficiency in auditing, vulnerability management, and incident management
• Military experience or significant industry certifications may substitute for formal education