Senior Security Controls Assessor (Cybersecurity)

Location: Remote within close proximity to the National Capital Region (NCR), Virginia, United States

Salary: $160,000–$190,000 per year

Company

hirify.global Federal delivers technology solutions in data and AI, cybersecurity, and enterprise transformation for defense, intelligence, and federal civilian agencies.

What you will do

• Assess, authorize, and continuously monitor federal information systems under the NIST RMF, IRS Publication 1075, and applicable security and privacy requirements.
• Review and maintain SA&A artifacts, including SSPs, SAPs, SARs, POA&Ms, contingency plans, PIAs, and IRS Publication 1075 documentation.
• Analyze inventories, network and data flow diagrams, change requests, vulnerability scans, and test reports to evaluate control effectiveness and identify gaps.
• Develop implementation guidance aligned with NIST SP 800-53, IRS Publication 1075, and agency-specific control overlays.
• Present findings and remediation recommendations to technical teams, executives, system owners, and agency stakeholders.
• Update security policies and procedures by analyzing federal legislation, OMB mandates, NIST guidance, emerging technologies, and threats.

Requirements

• Active Public Trust clearance or the ability to obtain and maintain one.
• U.S. citizenship required.
• Remote work within close proximity to the National Capital Region is required.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 7+ years of experience conducting security control assessments and supporting Assessment & Authorization activities in federal environments.
• Deep knowledge of NIST SP 800-53, NIST RMF, IRS Publication 1075, FedRAMP, OMB, and DHS compliance standards.

Nice to have

• CISSP, CISM, CISA, or an equivalent certification.
• Experience drafting and reviewing Privacy Impact Assessments and other privacy program artifacts.
• Familiarity with NIST SP 800-63 Digital Identity Guidelines.
• Experience with continuous monitoring programs and POA&M remediation tracking.

Culture & Benefits

• Full-time employment with general benefits provided.
• Work on mission-critical cybersecurity programs supporting federal civilian agencies.
• Environment focused on innovation, accountability, professional growth, and high-performing teams.
• Equal opportunity employment.