Federal Security Controls Assessor – 5+ Years, CISSP/CISA

Arlo Solutions LLC; United States; On-site; USD 110,000 - 140,000; Full time

Job summary

Arlo Solutions is seeking a Security Control Assessor to evaluate and assess DSCA information systems. Arlington, VA-based role involves conducting comprehensive assessments to ensure federal cybersecurity standards are met and to provide improvement recommendations.

The candidate will develop SAPs, SARs, and POA&Ms, perform risk assessments, and collaborate with IT and cybersecurity teams to implement controls. A strong background in NIST/FISMA and DoD directives is required.

Qualifications

• Must be a US Citizen.
• Must have a Secret Clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's degree preferred).
• Minimum of 5 years of experience in information security, with a focus on security control assessment and risk management.
• Certifications such as CISSP, CISM, CISA, CAP, or equivalent are highly desirable.
• In-depth knowledge of federal cybersecurity regulations and standards, including NIST SP 800 series and FISMA.
• Proven experience in conducting security control assessments and developing security assessment documentation.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills, with the ability to effectively communicate complex cybersecurity concepts to technical and non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

• Conduct thorough assessments of security controls on DSCA’s information systems and networks to ensure compliance with federal regulations, including NIST, FISMA, and DoD directives.
• Develop and maintain assessment documentation, including SAPs, SARs, and POA&Ms.
• Perform risk assessments to identify potential security threats and vulnerabilities.
• Provide detailed recommendations to mitigate identified risks and enhance the security posture of DSCA’s information systems.
• Collaborate with system owners, IT staff, and cybersecurity teams to ensure effective implementation of security controls.
• Conduct continuous monitoring activities to ensure ongoing compliance with security policies and procedures.
• Provide guidance on the security assessment and authorization (A&A) process, including developing and maintaining SSPs.
• Assist in the development and delivery of cybersecurity training and awareness programs for DSCA personnel.
• Stay current with the latest cybersecurity threats, trends, and technologies to continuously improve assessment methodologies and practices.
• Participate in security audits and reviews to ensure adherence to established security standards and best practices.

Skills

US Citizenship

Secret Clearance

5+ years information security

NIST/FISMA knowledge

Strong communication skills

Independent and collaborative work

Education

Bachelor's degree in Cybersecurity/IT/CS

Master's degree preferred

Tools

eMASS/STIGS experience

Job description

Arlo Solutions is seeking a Security Control Assessor to evaluate and assess DSCA information systems. Arlington, VA-based role involves conducting comprehensive assessments to ensure federal cybersecurity standards are met and to provide improvement recommendations.

The candidate will develop SAPs, SARs, and POA&Ms, perform risk assessments, and collaborate with IT and cybersecurity teams to implement controls. A strong background in NIST/FISMA and DoD directives is required.