IT Security Control Assessor

US101 Guidehouse Inc.; Tysons (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Plan

Tuition Reimbursement

Paid Holidays

Parental Leave

Mobility Stipend

Career Development

Job summary

Guidehouse is seeking an experienced cybersecurity professional to perform FISMA/RMF assessments and support system authorization efforts across the RMF lifecycle. You will conduct testing, interviews and evidence reviews, documenting results for audit-ready reporting and risk determinations.

Ideal candidates have a bachelor’s degree in a related field, 3+ years of cybersecurity experience, and the ability to obtain a SECRET clearance.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity or related field.
• Minimum of three years in cybersecurity with RMF/FISMA experience.
• Ability to obtain and maintain a Federal/DoD SECRET clearance; current ACTIVE SECRET preferred.
• Experience performing FISMA or RMF-based security control assessments.
• Knowledge of FISMA, NIST SP 800-53/800-53A/800-37 and cloud controls.

Responsibilities

• Conduct FISMA security control assessments per NIST standards.
• Support authorization efforts across the RMF lifecycle.
• Perform control testing, interviews, and evidence reviews.
• Document assessment results and risk determinations in SARs.
• Identify gaps and remediation actions with clear guidance.
• Coordinate with system owners, ISSOs, engineers and stakeholders.
• Support continuous monitoring and ad hoc reviews.
• Ensure assessments align with agency cybersecurity policies.

Skills

FISMA/RMF knowledge

NIST SP 800-53/800-53A

Security control assessments

Documentation & reporting

Interviews & evidence reviews

Cloud security assessment

Stakeholder communication

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

ACAS/Nessus

Splunk

Job description

Job Family: Cyber Consulting Travel Required: Up to 25% Clearance Required: Ability to Obtain Secret

What You Will Do:

• Conduct FISMA security control assessments in accordance with NIST SP 800-53 and NIST SP 800-53A
• Support system authorization efforts across the RMF lifecycle
• Perform control testing, interviews, and evidence reviews for management, operational, and technical controls
• Document assessment results, findings, and risk determinations in SARs and related ATO artifacts
• Identify control gaps, weaknesses, and POA&M items with clear, actionable remediation guidance
• Coordinate with system owners, ISSOs, engineers, and program stakeholders during assessments
• Support continuous monitoring activities, including ongoing control assessments and ad hoc reviews
• Ensure assessments align with agency-specific cybersecurity compliance and information security policies

What You Will Need:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field
• Minimum of THREE (3) years of experience in cybersecurity
• Must be able to OBTAIN and MAINTAIN a Federal or DoD "SECRET" security clearance; candidates must obtain approved adjudication of clearance prior to onboarding with Guidehouse.
• Candidates with an ACTIVE "SECRET" or higher-level clearance are preferred.
• Demonstrated experience performing FISMA or RMF-based security control assessments
• Strong working knowledge of FISMA, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37
• Experience assessing cloud-based systems, including inherited controls
• Ability to clearly document technical and non-technical findings for audit-ready reporting
• Understanding of federal cybersecurity compliance requirements and governance processes
• Relevant certifications preferred (e.g., CISSP, CISA, CAP, GSLC)

What Would Be Nice To Have:

• Master’s Degree in in computer science, Information Technology, Cybersecurity, or related field
• Certified Information Systems Security Professional (CISSP)
• Knowledge of cloud security (FedRAMP)
• Experience with security tools (ACAS/Nessus, Splunk, etc.)
• Project management experience
• #LI-DNI

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care
• Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors.

With an integrated business technology approach, Guidehouse drives efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets.

Built to help clients across industries outwit complexity, the firm brings together approximately 18,000 professionals to achieve lasting impact and shape a meaningful future.

guidehouse.com