IT Security Control Assessor
Core
Conduct FISMA security control assessments and support system authorization efforts across the RMF lifecycle for federal agencies.
Role type
IT Security Control Assessor
Builds
Security assessment reports (SARs) and ATO artifacts for federal systems
Domain
Federal Cybersecurity / Compliance
Deliverable
client delivery
Required skills
FISMA assessment, NIST SP 800-53/53A/37 knowledge, control testing, evidence review, risk determination, cloud security assessment, technical and non-technical documentation
Preferred skills
CISSP, CISA, CAP, GSLC, FedRAMP knowledge, security tools (ACAS/Nessus, Splunk), project management
Technologies
NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, ACAS, Nessus, Splunk
Responsibilities
Conduct FISMA security control assessments, support system authorization efforts, perform control testing and interviews, document assessment results in SARs, identify control gaps and remediation guidance, coordinate with system owners and stakeholders, support continuous monitoring activities
Seniority
Mid-level, hands-on IC