Hybrid Security Controls Assessor — RMF/NIST Expert

ecsfederal; Washington (District of Columbia); Hybrid; USD 150,000 - 168,000; Full time

Job summary

ECS Federal seeks a Security Controls Assessor to support a long-term U.S. Government contract in the Washington, DC hybrid office. The role emphasizes independent control assessments, policy alignment, and RMF steps 4–6 with extensive collaboration across security teams.

Requirements include an active security clearance, five years of information security experience, and proficiency with NIST SP 800-53 controls. Expect travel to CONUS and occasional OCONUS engagements.

Qualifications

• Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or related field.
• Minimum five years of information security experience.
• Minimum three years supporting security assessment teams and senior team member roles.
• Two years of experience using GRC tools.

Responsibilities

• Review and update information security policies, standards, and procedures per federal regulations.
• Perform independent security and privacy control assessments for SA&A.
• Assess existing and new FISMA systems and communicate control weaknesses.
• Review and analyze SSPs, Risk Assessments, ISCPs, CMPs, and other docs for accuracy.
• Develop and execute security and privacy assessment plans per NIST SP 800-53A.
• Document findings clearly with actionable recommendations.
• CONUS and OCONUS travel to conduct assessments.

Skills

Security testing

NIST RMF

GRC tools

Policy review

Security assessments

Travel CONUS/OCONUS

Education

Bachelor's degree in Computer Science / MIS / IT / Engineering / Information Security

Tools

GRC tools

Job description

ECS Federal seeks a Security Controls Assessor to support a long-term U.S. Government contract in the Washington, DC hybrid office. The role emphasizes independent control assessments, policy alignment, and RMF steps 4–6 with extensive collaboration across security teams.

Requirements include an active security clearance, five years of information security experience, and proficiency with NIST SP 800-53 controls. Expect travel to CONUS and occasional OCONUS engagements.