Security Control Assessor/IA Specialist
About The Position
The Security Control Assessor/IA Specialist provides information assurance for digital information and systems, protecting confidentiality, integrity, and availability. The role supports authorization to operate IT systems at acceptable levels of risk; monitors and tests systems for vulnerabilities and indicators of compromise; supports incident response and remediation; develops security policies; promotes user security awareness and training; and helps ensure compliance with government and other external standards. The specialist independently plans and performs security control assessments using the Risk Management Framework (RMF), validates controls, documents assessment results, and supports customer authorization processes. The position also identifies security risks, advises on system designs and technical solutions, contributes to policies and standards, and collaborates with stakeholders. The role requires at least five years of relevant professional experience and a bachelor's degree in a related field or equivalent work experience. A Secret clearance is required to start. Travel is up to 10%, local.
Requirements
- Working knowledge of NIST SP 800-53 Rev. 5 security controls, including control evaluation, validation, and alignment with federal cybersecurity requirements.
- Hands-on experience applying RMF Rev. 5, including control selection, assessment, documentation, and continuous monitoring.
- Foundational experience supporting security assessments in cloud environments such as AWS or Azure, including shared responsibility models and review of cloud control implementations.
- Ability to identify security control weaknesses, validate remediation actions, and interpret vulnerability findings in on-premises and cloud systems.
- Strong understanding of information assurance principles, ATO processes, and compliance frameworks.
- At least 5 years of relevant professional experience.
- Bachelor's degree in a related field or equivalent work experience.
- Demonstrated analytical ability and experience solving complex technical problems.
- Excellent communication and collaboration skills, with the ability to influence technical decisions and work independently with minimal supervision.
- Secret clearance required to start.
Nice To Haves
- Experience leading small technical teams or workgroups.
- Practical knowledge of project management methodologies.
- Ability to collaborate across multiple technical specialties to develop integrated solutions.
- Experience engaging with external stakeholders regarding operational policies and technical procedures.
Responsibilities
- Provide information assurance for digital systems, ensuring adherence to security and compliance standards.
- Develop and maintain assessment procedures and methodologies aligned with NIST guidelines and other relevant frameworks.
- Plan and execute security control assessments as an independent assessor using the Risk Management Framework for information systems.
- Validate security control implementation and provide test results.
- Provide tailored documentation to support customer security authorization processes.
- Identify vulnerabilities, weaknesses, and potential risks in information systems and infrastructure.
- Prepare Security Assessment Reports (SARs) documenting findings and recommendations.
- Support development and maintenance of information security policies, procedures, and standards.
- Support compliance with government regulations and external cybersecurity frameworks.
- Review system designs, technical solutions, and operational procedures and provide subject-matter-expert recommendations across functional teams.
- Work independently with limited supervision, managing assigned projects or technical processes.
- Coach and review junior team members' work to support their professional development.
- Communicate with internal stakeholders and external partners, including vendors or customers.
- Stay current with evolving cybersecurity threats, technologies, and best practices.
- Ensure compliance with security awareness training and organizational requirements.
Benefits
- Flexible time off benefit.
- Learning resources and learning and development opportunities.
- Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
- Competitive compensation and benefits options designed to support and protect employees and their families.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
