CYB Security Control Assessor

Location: Oak Ridge TN
Job Title: CYB - Security Control Assessor
Career Level From: Associate
Career Level To: Specialist
Job Specialty: Cyber Security

The Security Control Assessor (SCA) is responsible for conducting comprehensive security control assessments and evaluations of Federal information systems in support of the Assessment and Authorization (A&A) process. This person performs detailed technical and administrative reviews of security controls documents findings and provides evidence-based recommendations for control implementation and remediation. The SCA works collaboratively with Information System Security Officers (ISSOs) System Owners and cybersecurity teams to evaluate compliance with NIST standards and organizational security requirements. This role requires expertise in the NIST Risk Management Framework (RMF) particularly in the Assessment phase and the ability to independently assess control effectiveness against established baselines. Successful candidates will demonstrate strong analytical skills attention to detail and the ability to communicate complex security findings to both technical and non-technical stakeholders.

POSITION DUTIES AND RESPONSIBILITIES:

• Conducts security control assessments in accordance with NIST SP 800-53A assessment procedures and organizational assessment methodologies
• Evaluates the implementation and effectiveness of security controls aligned with approved baselines and NIST standards
• Develops and documents security assessment reports including control findings evidence summaries and risk determinations
• Performs gap analysis to identify control deficiencies and non-compliance with security requirements
• Collaborates with system teams to gather assessment evidence and validate control implementation
• Supports the development and refinement of System Security Plans (SSPs) and assessment documentation
• Reviews and evaluates Plans of Action and Milestones (POA&Ms) for completeness and appropriateness of remediation strategies
• Assesses the security impact of proposed system changes and evaluates control modifications
• Participates in security assessments audits and Authorizing Official reviews
• Maintains current knowledge of NIST standards assessment methodologies and emerging security assessment practices
• Provides technical guidance and recommendations for control implementation and remediation
• Prepares assessment packages and supporting documentation for review and authorization
• Serves as a subject matter expert on security control assessment practices and RMF processes

• Meaningful work and unique opportunities to support missions vital to national and global security
• Top-notch dedicated colleagues
• Generous pay and benefits with a stable organization
• Career advancement and professional development programs
• Work-life balance fostered through flexible work options and wellness initiatives