Security Control Assessor

LinTech Global•Monterey, CA

1d•Onsite

About The Position

The Security Control Assessor is responsible for conducting independent, comprehensive assessments of the management, operational, and technical security controls and control enhancements within or inherited by an information technology (IT) system. The primary objective is to determine the overall effectiveness of these controls, as defined in NIST 800-37.

Requirements

AA/AS from an accredited college or university or substitute with 3+ years of equivalent technical related experience.
ACAS
Microsoft Defender
STIGs
Microsoft 365
SaaS Security
RHEL
Windows Server
MacOS
eMASS
Perform thorough evaluations to ensure compliance with NIST 800-37 and related standards.
Assess control effectiveness, identify vulnerabilities, and recommend enhancements.
Provide detailed reports and communicate findings to stakeholders.
Work with IT and security teams to implement recommended measures.
IAT Level II Certification is required to Start (CCNA Security, CSA+, GICSP, GSEC, Security+ CE, or SSCP) Certification
A NACLC Public Trust Clearance is required to Start.

Responsibilities

Conduct comprehensive assessments of management, operational, and technical security controls.
Evaluate compliance with NIST SP 800-53, NIST RMF, FedRAMP, DoD RMF, and agency-specific requirements.
Develop Security Assessment Plans (SAPs).
Execute control testing and validation activities.
Review system documentation, architectures, and security artifacts.
Assess cybersecurity risks and determine residual risk levels.
Identify control deficiencies and recommend remediation actions.
Validate Plans of Action & Milestones (POA&Ms).
Support Authorization to Operate (ATO) decisions.
Ensure compliance with federal and regulatory requirements.
Document findings, vulnerabilities, and risk determinations.
Present assessment results to system owners, ISSOs, ISSMs, and Authorizing Officials.
Track remediation efforts and reassessment activities.