Senior Security Controls Assessor

Job Summary

Supporting a major federal civilian agency, the full-time Senior Security Controls Assessor will assess, authorize, and continuously monitor federal information systems, ensuring compliance with NIST RMF and IRS Publication 1075 while working remotely within close proximity to the National Capital Region.

Key responsibilities

• Review, assess, and maintain Security Assessment and Authorization (SA&A) artifacts, ensuring compliance with federal security requirements
• Analyze control effectiveness through evaluation of hardware/software inventories, network diagrams, and vulnerability scan results, identifying compliance gaps
• Develop and deliver implementation guidance and present assessment findings to both technical teams and non-technical stakeholders

Required qualifications

• Active Public Trust clearance or ability to obtain one
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience
• 7+ years of hands-on experience in security control assessments within federal environments
• Deep knowledge of NIST SP 800-53, NIST RMF, IRS Publication 1075, and other compliance standards
• One of the following certifications preferred: CISSP, CISM, or CISA