Lead Security Control Assessor – RMF Expert

Chenega Corporation; Arlington (VA); On-site; USD 175,000 - 213,000; Full time

Job summary

Chenega MIOS in Arlington, VA seeks a Lead Senior Security Control Assessor (SCA) to guide RMF-based assessments and continuous monitoring for DoD-related information systems. You will coordinate SAPs, SARs, and POA&Ms, and advise leadership on risk posture and mitigations.

Ideal candidates bring Top Secret/ SCI eligibility, 5+ years of security assessment experience, and cloud security exposure across FedRamp, AWS, and Azure.

Qualifications

• Bachelor's degree required or Associate's degree with 2+ years of relevant experience.
• High school diploma or GED equivalent with 4+ years of relevant experience.
• 5+ years relevant experience required; DoD 8140 IAM Level II (CAP, CASP, CISM, CISSP, GSLC, CCISO) required.
• Top Secret clearance with SCI eligibility is required.

Responsibilities

• Advise the A&A Manager on impact levels for Confidentiality, Integrity, and Availability.
• Conduct SAP for each package assessment and ensure on-time completion.
• Initiate POA&M with weaknesses and suspense dates based on SAR findings.
• Evaluate documentation and provide recommendations for security authorization.
• Assess changes to IS environments that affect system authorization.
• Serve as cybersecurity technical advisor to the A&A Manager.
• Develop a continuous monitoring strategy conforming to DoD requirements.
• Document risk levels in the SAR and identify key risk drivers.
• Develop a continuous monitoring plan tailored to the information system.
• Other duties as assigned.

Skills

RMF knowledge

NIST 800-series

Risk assessment

POA&M & SAR familiarity

Cloud security (FedRAMP/AWS/Azure)

Vulnerability tools

Project management

MS Office

Education

Bachelor's degree

Associate's degree + 2+ years experience

High school diploma or GED + 4+ years experience

Tools

Vulnerability scanning tools

SAP/JSIG tooling

POA&M tracking tools

Job description

Chenega MIOS in Arlington, VA seeks a Lead Senior Security Control Assessor (SCA) to guide RMF-based assessments and continuous monitoring for DoD-related information systems. You will coordinate SAPs, SARs, and POA&Ms, and advise leadership on risk posture and mitigations.

Ideal candidates bring Top Secret/ SCI eligibility, 5+ years of security assessment experience, and cloud security exposure across FedRamp, AWS, and Azure.