Security Control Assessor

Edgewater Federal Solutions, Inc.

$80K — $95K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Associate's degree plus 5-10 years relevant experience, or equivalent education-experience combination.
  • U.S. Citizenship required due to contract specifications.
  • Strong understanding of NIST SP 800-37 and NIST SP 800-53 standards.
  • Experience with CNSSI 1253 is an advantage.
  • Working knowledge of cybersecurity requirements and compliance controls.
  • Ability to review vendor cybersecurity plans for NIST compliance.
  • Strong communication skills with vendor IT and Cyber teams.

Responsibilities

  • Implement and maintain security controls according to organizational standards.
  • Support system authorization activities and maintain security documentation like System Security Plans.
  • Monitor system security posture to identify risks and compliance gaps.
  • Track and manage Plans of Action and Milestones, coordinating remediations with stakeholders.
  • Assess security impacts of system changes and manage configuration control processes.
  • Conduct continuous monitoring, including vulnerability management and reporting.
  • Act as a liaison between system teams, cybersecurity operations, and governance bodies.
  • Prepare systems for security assessments and audits.

Benefits

  • Competitive health insurance options.
  • Retirement plan with company matching.
  • Paid time off and holidays.
  • Professional development and training opportunities.
  • Flexible work environment.
Full Job Description
Overview

Edgewater Federal Solutions is seeking a Security Control Assessor to join our team in Oak Ridge, TN.

Responsibilities
  • Implements and maintains security controls aligned with approved baselines and organizational requirements.
  • Supports system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
  • Monitors system security posture and identifies risks, vulnerabilities, and compliance gaps.
  • Tracks and manages POA&Ms and coordinates remediation activities with system stakeholders.
  • Assesses the security impact of system changes and supports configuration and change management processes.
  • Supports continuous monitoring activities, including vulnerability management and security reporting.
  • Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
  • Prepares systems for security assessments, audits, and Authorizing Official reviews.
Qualifications
  • Associate's degree and 5-10 years of relevant experience; OR equivalent combination of education and relevant experience.
  • U.S. Citizenship is required per contract.
  • Firm understanding of NIST SP 800-37 and NIST SP 800-53
  • CNSSI 1253 experience a plus
  • General understanding of cyber requirements and knowledge of cyber controls
  • Ability to interpret cyber security plans for vendors to determine compliance with NIST requirements.
  • Ability to communicate with vendor IT and Cyber staff.

Desired:

  • CMMC Professional Certification (CCP)
  • CMMC Assessor Certification (CCA)
  • NIST security controls training

Similar Jobs

More Jobs at Edgewater Federal Solutions, Inc.

More Information Technology Jobs

Find similar Security Control Assessor jobs: