Mid-Level Security Control Assessor (NIST 800-37)

Rividium Inc; St. Louis (MO); On-site; USD 90,000 - 150,000; Full time

Job summary

RiVidium Inc. seeks a Security Control Assessor to perform independent, comprehensive assessments of IT security controls and enhancements. The role focuses on evaluating management, operational, and technical security controls to determine overall effectiveness as defined by NIST 800-37.

The candidate will manage accreditation packages, plan security authorization reviews, review risk levels, and develop risk mitigation strategies across systems and networks. A TS/SCI clearance is required.

Qualifications

• Bachelor degree or higher from an accredited college or university.
• Certifications: IAT Level 2 cert
• Clearance- TS/SCI

Responsibilities

• Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
• Review authorization and assurance documents to confirm risk levels are within acceptable limits for each software application, system, and network.
• Verify that security postures are implemented as stated, document deviations, and recommend corrective actions.
• Develop security compliance processes and/or audits for external services (e.g., cloud providers, data centers).
• Establish acceptable limits for software applications, networks, or systems.
• Perform security reviews and identify gaps in security architecture, and develop risk mitigation strategies.
• Conduct risk analysis (threat, vulnerability, probability) during major changes.
• Provide input to Risk Management Framework activities and related documentation.

Skills

Vulnerability analysis

Documentation

Communication

Collaborative work

Problem solving

Briefings

Technical writing

Risk assessment

Education

Bachelor's degree or higher in CS/Cyber Security/IT/Engineering

Job description

RiVidium Inc. seeks a Security Control Assessor to perform independent, comprehensive assessments of IT security controls and enhancements. The role focuses on evaluating management, operational, and technical security controls to determine overall effectiveness as defined by NIST 800-37.

The candidate will manage accreditation packages, plan security authorization reviews, review risk levels, and develop risk mitigation strategies across systems and networks. A TS/SCI clearance is required.