Impactful Security Controls Assessor (Intermediate)

Rividium Inc; Springfield (VA); On-site; USD 135,000 - 140,000; Full time

Job summary

RiVidium Inc. is seeking a Security Control Assessor to perform independent, comprehensive assessments of management, operational, and technical security controls for IT systems, ensuring overall effectiveness in line with NIST 800-37.

This position requires planning and conducting security authorization reviews, developing assurance cases for initial system installations, and reviewing relevant documents to keep risk within acceptable limits.

Qualifications

• Bachelor degree or higher from an accredited college or university.
• Prefer an accredited Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in Mathematics or Engineering.
• IAT/IAM Level 2 certification

Responsibilities

• Manage and approve Accreditation Packages (e.g., ISO/IEC 15026-2).
• Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
• Review authorization and assurance documents to confirm risk is within acceptable limits for each software application, system, and network.
• Verify that security postures are implemented as stated, document deviations, and recommend actions.
• Develop security compliance processes and audits for external services (e.g., cloud service providers, data centers).
• Perform security reviews, identify gaps in security architecture, and develop a risk management plan.
• Provide input to Risk Management Framework activities and related documentation.
• Ensure remediation plans are in place for vulnerabilities identified during risk assessments.

Skills

Vulnerability analysis

Security risk assessment

Communication skills

Briefings & presentations

Technical documentation

Collaboration

Critical thinking

Problem solving

Education

Bachelor's degree or higher

Job description

RiVidium Inc. is seeking a Security Control Assessor to perform independent, comprehensive assessments of management, operational, and technical security controls for IT systems, ensuring overall effectiveness in line with NIST 800-37.

This position requires planning and conducting security authorization reviews, developing assurance cases for initial system installations, and reviewing relevant documents to keep risk within acceptable limits.