OverviewEdgewater Federal Solutions is seeking a Security Control Assessor to join our team in Oak Ridge, TN.
Responsibilities
- Implements and maintains security controls aligned with approved baselines and organizational requirements.
- Supports system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
- Monitors system security posture and identifies risks, vulnerabilities, and compliance gaps.
- Tracks and manages POA&Ms and coordinates remediation activities with system stakeholders.
- Assesses the security impact of system changes and supports configuration and change management processes.
- Supports continuous monitoring activities, including vulnerability management and security reporting.
- Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
- Prepares systems for security assessments, audits, and Authorizing Official reviews.
Qualifications
- Associate's degree and 5-10 years of relevant experience; OR equivalent combination of education and relevant experience.
- U.S. Citizenship is required per contract.
- Firm understanding of NIST SP 800-37 and NIST SP 800-53
- CNSSI 1253 experience a plus
- General understanding of cyber requirements and knowledge of cyber controls
- Ability to interpret cyber security plans for vendors to determine compliance with NIST requirements.
- Ability to communicate with vendor IT and Cyber staff.
Desired:
- CMMC Professional Certification (CCP)
- CMMC Assessor Certification (CCA)
- NIST security controls training