Security Control Assessor III
CGI•Washington, DC
•Hybrid
About The Position
The Security Control Assessor III is the senior authority for complex security assessments across Treasury systems, providing independent evaluation of NIST SP 800 53 control implementations and authoritative risk determinations for Authorizing Officials. This role ensures rigorous assessment quality, FedRAMP/Cloud evaluation expertise, and high impact analysis for system authorization and enterprise compliance. This position is located in our Fairfax, VA or Lafayette, LA or Knoxville, TN office; however, a hybrid working model is acceptable.
Requirements
- Bachelor's degree in Cybersecurity or related field.
- 9+ years of security control assessment experience.
- Experience with NIST SP 800 115, MITRE ATT&CK, CNSSI 1253.
Nice To Haves
- CAP or CISSP certification.
- Experience supporting FedRAMP High, HVA, or national security systems.
- Familiarity with AI testing and red teaming.
Responsibilities
- Lead comprehensive control testing, including cloud, hybrid, and classified system assessments
- Develop SAPs, assess security controls, validate control inheritance, and produce SARs.
- Conduct HVA assessments and support DHS/OMB compliance
- Evaluate AI models for algorithmic bias, adversarial vulnerabilities, and explainability
- Validate remediation effectiveness and POA&M closure accuracy.
- Support ATO packages with documented risk findings and recommendations.
- Provide independent verification of security engineering outcomes
Benefits
- Competitive compensation
- Comprehensive insurance options
- Matching contributions through the 401(k) plan and the share purchase plan
- Paid time off for vacation, holidays, and sick time
- Paid parental leave
- Learning opportunities and tuition assistance
- Wellness and Well being programs
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
