Remote NIST 800-53 Security Controls Assessor

Rapid Strategy; Polska; Hybrid; PLN 350,000 - 544,000; Full time

Job summary

Rapid Strategy is seeking a NIST 800-53 Security Control Assessor to evaluate and validate security controls for compliance with federal requirements. This remote role supports A&A processes and requires thorough assessments and detailed SARs.

Preference will be given to candidates based in North Carolina. Applicants bring 5+ years of security control assessment or IT audit experience, knowledge of FISMA/RMF, and proficiency with Nessus and SCAP.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field.
• Minimum 5 years of experience in security control assessment or IT auditing.
• Knowledge of FISMA, RMF, and related frameworks.
• Proficiency with Nessus and SCAP Compliance Checker.
• Relevant certifications (e.g., CAP, CISA, CISSP) preferred.

Responsibilities

• Assess security controls based on NIST 800-53 and FISMA standards.
• Conduct interviews, reviews, and testing to verify compliance.
• Prepare detailed Security Assessment Reports (SARs) and POA&Ms.
• Support risk assessments and vulnerability analyses.
• Collaborate with system owners to develop remediation plans.

Skills

Documentation & reporting

Attention to detail

Communication

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

Nessus

SCAP Compliance Checker

Tenable SecurityCenter

Job description

About Us:Rapid Strategy, an award-winning African-American-owned small business, specializes in providing cutting-edge cybersecurity services to both private and public sectors. Based in Charlotte, NC, we support clients nationwide, delivering innovative solutions to protect against evolving cyber threats. Learn more about us at www.RapidStrategy.io.

Position Overview:We are seeking a NIST 800-53 Security Control Assessor to evaluate and validate security controls for compliance with federal requirements. This role involves conducting assessments, documenting findings, and supporting the A&A process. This role is remote but preference will be given to candidates based in North Carolina.

Key Responsibilities:

• Assess security controls based on NIST 800-53 and FISMA standards.

• Conduct interviews, reviews, and testing to verify compliance.

• Prepare detailed Security Assessment Reports (SARs) and POA&Ms.

• Support risk assessments and vulnerability analyses.

• Collaborate with system owners to develop remediation plans.

Basic Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, or related field.

• Minimum 5 years of experience in security control assessment or IT auditing.

• Knowledge of FISMA, RMF, and related frameworks.

• Proficiency with assessment tools like Nessus and SCAP Compliance Checker.

• Relevant certifications (e.g., CAP, CISA, CISSP) preferred.

Additional Qualifications:

• Familiarity with automated compliance tools such as Tenable SecurityCenter.

• History of strong documentation and reporting skills.

• Experience with penetration testing or vulnerability scanning tools.

At Rapid Strategy, we believe that building a diverse, inclusive, and authentic team is key to driving innovation and success. Studies show that women, people of color, and members of the LGBTQ+ community may hesitate to apply for roles unless they meet every qualification listed. We want to change that. If you’re excited about this role but don’t meet every single qualification, we still encourage you to apply. You might be the perfect fit for this position—or another opportunity with us. The Rapid Team looks forward to hearing from you!