Senior Security Controls Assessor (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Security Controls Assessor (Cybersecurity): Conducting comprehensive security assessments of federal information systems with an accent on NIST 800-53 Rev 5 compliance and ATO documentation. Focus on leading assessment interviews, managing evidence, and providing actionable recommendations to improve security posture within federal government environments.
Location: Remote (Must be a U.S. citizen and able to obtain/maintain a Public Trust clearance)
Company
is a mission-driven organization delivering innovative, technology-enabled solutions across defense, civilian, and homeland security sectors.
What you will do
- Independently perform security controls assessments aligned with NIST 800-53 Revision 5.
- Manage the full lifecycle of ATO documentation and compliance requirements.
- Coordinate testing activities with stakeholders and team leadership.
- Develop and execute comprehensive security assessment plans.
- Lead assessment interviews and manage evidence collection.
- Provide expert recommendations to enhance organizational security posture.
Requirements
- Must be a U.S. citizen due to federal contract requirements.
- Ability to obtain and maintain a Public Trust or Suitability Determination.
- Minimum of 3 years of experience leading security controls assessments.
- Proven experience supporting federal government projects.
- Expertise in NIST RMF and NIST 800-53 Rev 5.
- Strong understanding of the ATO process.
Nice to have
- Bachelor’s degree in Information Security or a related field.
- Professional certifications such as CISSP, CISM, or CISA.
- Experience with CSAM/JCAM tools.
Culture & Benefits
- Comprehensive health care plans including medical, dental, and vision.
- Retirement planning with 401(k).
- Paid time off and family leave programs.
- Life insurance and disability coverage.
- Commitment to professional development and training.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →