Remote Part-Time Security Controls Assessor (NIST RMF)

testpros; United States; Remote; USD 69,000 - 131,000; Part time

Job summary

TestPros seeks Security Controls Assessors to support NIST RMF/FISMA based compliance for federal and commercial clients. The role focuses on SSP/SAR/POA&M development, security reporting, and remediation leadership.

Suitable candidates will have 5+ years in IT security compliance, cloud security, governance, and incident management. Part-time consulting with opportunities late 2026/2027.

Qualifications

• 5+ years of IT security compliance experience, including NIST 800-53 Rev 5.
• Experience in cloud security, governance, risk analysis, auditing and vulnerability management.
• Military/service considered in lieu of formal education with relevant certifications.

Responsibilities

• Develop SSPs based on NIST 800-53 Rev5.
• Create/update SARs and POA&M artifacts.
• Provide security reports with risk mitigations and escalation as needed.
• Verify implementation of controls to meet compliance.
• Maintain management informed of areas of concern.
• Review SSPs, POA&Ms and related artifacts.
• Lead POA&M program for remediation data and validation.
• Develop SOPs/CONOPs and information security policies.
• Lead information security maturity assessments and training.
• Produce KPIs for security measures.
• Stay current with threat landscape and intelligence.

Skills

NIST 800-53 Rev5

Cloud security

Security governance

Security risk analysis

Auditing and monitoring

Vulnerability management

Advanced malware protection

Threat intelligence

Incident management

Penetration testing

RFCs/standards evolution

Education

Bachelor’s Degree in Computer Science or related field

Tools

Nmap

Metasploit

Job description

TestPros seeks Security Controls Assessors to support NIST RMF/FISMA based compliance for federal and commercial clients. The role focuses on SSP/SAR/POA&M development, security reporting, and remediation leadership.

Suitable candidates will have 5+ years in IT security compliance, cloud security, governance, and incident management. Part-time consulting with opportunities late 2026/2027.