Lead Security Control Assessor

Job Description

Position Summary

Lead federal A&A, ATO, and continuous monitoring activities, ensuring security compliance, risk management, and timely remediation.

Key Responsibilities

\n
• Lead NIST RMF security control assessments and A&A/ATO activities.
\n
• Oversee assessment plans, reports, authorization packages, and continuous monitoring.
\n
• Review security documentation, identify risks, and validate remediation.
\n
• Guide assessment teams and coordinate with system owners, ISSOs, engineers, and government stakeholders.
\n
• Track security findings, POA&Ms, and compliance deliverables.
\n

Required Qualifications

\n
• Bachelor’s degree in cybersecurity, IT, computer science, engineering, or related field.
\n
• 5+ years of cybersecurity experience, including 3+ years in federal A&A/ATO or NIST RMF.
\n
• Experience leading security control assessments and federal authorization activities.
\n
• Strong knowledge of NIST SP 800-37, 800-53, 800-53A, and 800-30.
\n
• Excellent leadership, communication, and documentation skills.
\n
• Active CISSP or CISM certification required.
\n