Security Control Assessor
Core
Conduct security assessments and Risk Management Framework (RMF) activities for federal information systems to ensure authorization and compliance.
Role type
Senior IC security control assessor (RMF)
Builds
Security Assessment Plans, Security Assessment Reports, and Authorization to Operate (ATO) recommendations
Domain
US Federal Government / Cybersecurity / Risk Management
Required skills
Risk Management Framework (RMF) 800-37, Continuous Monitoring (800-137), FISMA, NIST 800-series, Security Assessment & Authorization (SA&A), vulnerability scanning, project management, cloud security authorizations (FedRAMP, AWS, Azure), SAP/JSIG, security artifact documentation (SSP, SAR, SAP)
Preferred skills
Systems Security Engineering, executive-level briefing, GDPR/HIPAA compliance knowledge
Technologies
AWS, Azure, Excel, SAP, IAM
Responsibilities
Advise system owners on CIA impact levels, complete security assessments, open POA&Ms, review assessment documentation, evaluate proposed system changes, develop continuous monitoring strategies, document risk ratings, produce RMF deliverables for Step 4, perform initial remediation actions, assess controls per continuous monitoring strategy
Seniority
Senior, hands-on IC
