Electronic Consulting Services, Inc (ECS Federal)

Apply Now

Senior Security Controls Assessor

Fairfax, VA, US • Posted 5 hours ago • Updated 5 hours ago

Full Time

On-site

Fitment

Dice Job Match Score™

⏳ Almost there, hang tight...

Job Details

Skills

FIPS
System Security
Security Analysis
Test Plans
Computer Hardware
Network
Data-flow Diagrams
Vulnerability Scanning
Research
Emerging Technologies
Facilitation
Issue Resolution
Continuous Improvement
Security Clearance
Cyber Security
Information Technology
Computer Science
CISSP
CISM
Information Systems
CISA
Authorization
NCR
FedRAMP
OMB
Regulatory Compliance
Security Controls
Communication
Documentation
RMF
Risk Management Framework
Technical Drafting
Privacy
Identity Management
NIST SP 800 Series
Continuous Monitoring
Information Security

FIPS
System Security
Security Analysis
Test Plans
Computer Hardware
Network
Data-flow Diagrams
Vulnerability Scanning
Research
Emerging Technologies
Facilitation
Issue Resolution
Continuous Improvement
Security Clearance
Cyber Security
Information Technology
Computer Science
CISSP
CISM
Information Systems
CISA
Authorization
NCR
FedRAMP
OMB
Regulatory Compliance
Security Controls
Communication
Documentation
RMF
Risk Management Framework
Technical Drafting
Privacy
Identity Management
NIST SP 800 Series
Continuous Monitoring
Information Security

Summary

Job Description

Everforth ECS is seeking a Senior Security Controls Assessor who lives in close proximity to the National Capital Region (NCR) to join a premier, enterprise-scale cybersecurity program supporting a major federal civilian agency. This is a full-time position that is available immediately for a qualified candidate.

As a Security Controls Assessor , you will support the assessment, authorization, and continuous monitoring of federal information systems in accordance with the NIST RMF, IRS Publication 1075, and applicable federal security and privacy requirements. Working closely with system owners, security personnel, and agency stakeholders, you will assess controls, identify compliance gaps, and deliver actionable recommendations that reduce risk across the enterprise.

Position Responsibilities:

Support the review, assessment, and maintenance of Security Assessment and Authorization (SA&A) artifacts, including:

IRS Publication 1075 artifacts

FIPS 199, PTA, PIA

NIST SP 800-60 Digital Identity documentation

System Security Plans (SSPs)

Security Assessment Plans (SAPs) and Security Assessment Reports (SARs)

Information System Contingency Plans and Contingency Test Plans

Plans of Action & Milestones (POA&Ms)

Analyze hardware/software inventories, network diagrams, data flow diagrams, system change requests, vulnerability scan results, and test reports to evaluate control effectiveness and identify gaps.

Develop and deliver enterprise-specific implementation guidance to help system owners achieve and maintain compliance with NIST SP 800-53 , IRS Publication 1075, agency-specific control overlays .

Present assessment findings, control deficiencies, and remediation recommendations to both technical teams and non-technical stakeholders in a clear, actionable format.

Review, update, and maintain information security policies, standards, and procedures to ensure alignment with federal regulations and agency requirements.

Conduct stakeholder interviews to document procedures and validate the implementation of security and privacy controls.

Analyze federal legislation, OMB mandates, and NIST guidance to identify required policy updates and inform program improvements.

Research emerging technologies and threats to support the development of current, effective security and privacy policies, standards, and procedures.

Serve as a trusted liaison between client personnel and assessment teams, facilitating clear communication and timely issue resolution.

Assist in the development and continuous improvement of a comprehensive enterprise information security and privacy program grounded in the latest laws, regulations, and industry best practices.

Required Skills

Active Public Trust clearance, or the ability to obtain and maintain one.
U.S. Citizenship required .
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent professional experience.
One of the following certifications or equivalent certificationspreferred:
- Certified Information Systems Security Professional ( CISSP )
- Certified Information Security Manager ( CISM )
- Certified Information Systems Auditor ( CISA )

7+ years of hands-on experience conducting security control assessments and supporting Assessment & Authorization (A&A) activities within federal environments.

Remote but within close proximity to the NCR.

Deep knowledge of NIST SP 800-53, NIST RMF, IRS Publication 1075, FedRAMP, OMB, and DHS compliance standards and requirements.

Demonstrated experience planning and leading security control assessments as a senior team member.

Proven ability to translate complex technical findings into clear, non-technical language for executive and stakeholder audiences.

Strong written and verbal communication skills, with a track record of producing high-quality federal security documentation.

Desired Skills

In-depth understanding of the NIST RMF and its application across the system lifecycle.

Experience drafting and reviewing Privacy Impact Assessments (PIAs) and other privacy program artifacts.

Familiarity with federal identity and access management standards, including NIST SP 800-63 Digital Identity Guidelines.

Experience supporting continuous monitoring programs and POA&M remediation tracking.

Ability to provide strategic guidance that enhances and optimizes an agency's overall information security posture.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10112MAN
Position Id: 4708
Posted 5 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Security Control Assessor

Alexandria, Virginia

•

Today

Job#: 3037634 Job Description: Security Control Assessor Location: Alexandria, Virginia (Onsite) Role Overview We are seeking a skilled and detail-oriented Security Control Assessor. The successful candidate will be responsible for evaluating, testing, and validating the effectiveness of security controls within information systems and networks, with a strong emphasis on applying the Risk Management Framework (RMF). This role requires a strong background in RMF execution, documentation for A

Easy Apply

Full-time

$70 - $75 per hour

Cyber Analyst Principal - TS/SCI with Polygraph

McLean, Virginia

•

Today

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Security Evaluations, Security Reviews, Security Testing Certifications: Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Inf

Full-time

USD 124,093.00 - 166,750.00 per year

Information Systems Security Officer (ISSO), Mid

Washington, District of Columbia

•

Today

Description Tyto Athene is seeking a Information Systems Security Officer (ISSO), Mid to support a federal customer in Washington, DC We are looking for a highly organized, proactive, and customer-focused cybersecurity professional who excels at building trusted relationships, communicating with both technical and executive stakeholders, and independently driving complex initiatives to successful completion. The ideal candidate thrives in a fast-paced environment, embraces ownership and account

Full-time

USD 105,000.00 - 125,000.00 per year

IT Security Auditor - Senior Consultant

Chantilly, Virginia

•

Today

Job Family: Technology Consulting Travel Required: Up to 10% Clearance Required: Active Top Secret SCI with Polygraph What You Will Do: The Senior IT Security Auditor will lead stakeholder engagement and technical delivery for efforts supporting federal agencies with IT controls assessments and program evaluations. This is an ideal role for someone with an information security and assurance or IT audit background who is looking to utilize their skills to work with the federal government to a

Full-time

Search all similar jobs

More jobs at Electronic Consulting Services, Inc (ECS Federal) in Fairfax, VA