DoD RMF Security Control Assessor (Secret Clearance)

Crest Security Assurance; Fort Lee (NJ); On-site; USD 90,000 - 95,000; Full time

Job summary

Crest Security Assurance seeks a Security Control Assessor to support the DCMA CSS contract in Fort Lee, NJ. You will independently assess security controls for classified and unclassified information systems per DoDI 8510.01, RMF, NIST 800-53/800-53A, and provide evidence and risk-based recommendations for authorization decisions and continuous monitoring.

Responsibilities include planning and executing SAPs, reviewing security artifacts, documenting findings in SARs/SCARs/RARs, validating

Qualifications

• Active Secret security clearance.
• At least 5-7 years of related cybersecurity, RMF, security control assessment, or information assurance experience.
• DoD IAM III certification(s) (one of the following):

Responsibilities

• Develop and execute Security Assessment Plans (SAPs) with defined scope, methodology, procedures, schedules, and evidence requirements.
• Assess controls via documentation review, interviews, observation, testing, and analysis of artifacts (vulnerability scans, STIG checklists, baselines, continuous monitoring).
• Document assessment results in SARs/SCARs/RARs with evidence and traceability.
• Review POA&Ms, evaluate mitigations, and perform closure validation or follow-up testing.
• Maintain results, control status, evidence, and authorization records in eMASS and report risk/performance metrics to DCMA leadership.

Job description

Crest Security Assurance seeks a Security Control Assessor to support the DCMA CSS contract in Fort Lee, NJ. You will independently assess security controls for classified and unclassified information systems per DoDI 8510.01, RMF, NIST 800-53/800-53A, and provide evidence and risk-based recommendations for authorization decisions and continuous monitoring.

Responsibilities include planning and executing SAPs, reviewing security artifacts, documenting findings in SARs/SCARs/RARs, validating