Security Control Assessor
Core
Conduct independent security control assessments and risk management framework (RMF) evaluations for federal government information systems.
Role type
Senior IC security control assessor
Builds
Security Assessment Reports (SARs), System Security Plans (SSPs), and Plans of Action and Milestones (POA&Ms)
Domain
Federal government cybersecurity and compliance
Required skills
NIST RMF implementation, vulnerability management, security control assessment, eMASS tool usage, STIG implementation analysis, continuous monitoring, risk evaluation
Preferred skills
None stated
Technologies
eMASS, NIST frameworks, STIGs
Responsibilities
Plan and execute security control assessments for various information systems; Analyze and evaluate the effectiveness of implemented security controls; Identify vulnerabilities, weaknesses, and potential risks; Prepare detailed Security Assessment Reports (SARs); Collaborate with system owners, ISSOs, and other stakeholders; Verify the implementation of remediation actions; Provide expert advice on SSPs and POA&Ms; Validate security control implementation and provide test results
Seniority
Senior, hands-on IC
