Avint · 21 hours ago

Senior Security Control Assessor

Reston, VA

Full-time

Remote

Senior Level, Lead/Staff

$115K/yr - $125K/yr

10+ years exp

Maximize your interview chances

ConsultingCyber Security

No H1B

Security Clearance Required

Insider Connection @Avint

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Responsible for overseeing and leading the overall duties of the Security Control Assessors

Assess security posture of a client's environment and develop remediation/mitigation strategies to reduce risks while enhancing system and application security

Provide technical input to information security policies, processes, and awareness training

Develop standard operating procedures (SOPs) for security operations and security tools/technologies

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Security Control AssessmentNIST 800-53Risk Management Framework (RMF)CISSPFISMA complianceOMB MemorandumsNIST 800 series publicationsTechnical writing

Required

Minimum of 10 years of experience conducting security control assessment of all NIST 800-53 controls

BS in Computer Science, Information Systems or related discipline from an accredited college or university required

Certification in information technology security (e.g., CISSP or CISSM)

Thorough knowledge of NIST 800-53 security controls and required documentation

Experience conducting risk assessments and developing security assessment reports

Ability to obtain federal agency required clearance

Experience overseeing the overall duties of the Information System Security Officer

Experience in all areas of cybersecurity, but in particular the federal cybersecurity guidance documents including OMB Memorandums, FISMA, and NIST Special Publications

Ability to implement information security requirements for IT systems through the Risk Management Framework (RMF)

Excellent written and verbal communications skill including the ability to communicate effectively with internal stakeholders

Experience with NIST 800 series publications