Remote Security Control Assessor — RMF/ATO Focus

SkyePoint Decisions; United States; Remote; USD 60,000 - 85,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holidays

Health insurance options

401k matched

Job summary

SkyePoint Decisions is seeking a Junior Security Control Assessor to support the DoED CPSS in Washington, DC. This is a remote role with responsibilities around RMF, ATOs, and continuous monitoring. You will review security documentation and coordinate with stakeholders to ensure timely authorization and compliance.

The position requires a bachelor’s degree and 3–5 years of related experience, plus security certifications. U.S.

Qualifications

• Bachelor’s degree and 3–5 years related experience.
• Industry professional certification.
• Experience with RMF and ATO processes.
• Familiarity with NIST SP 800-53 controls.
• Experience reviewing SSPs, PIAs, RAs, POA&Ms, and ATO packages.
• Experience supporting continuous monitoring/ongoing authorization.

Responsibilities

• Support SA and OSA activities per RMF.
• Review security artifacts for accuracy for ATO packages.
• Assist with development and maintenance of ATO packages.
• Review security docs (SSPs, PIAs, RAs, POA&Ms).
• Support continuous monitoring and renewal tracking for ATOs.
• Coordinate with System Owners and stakeholders on renewals.
• Maintain CSAM or other GRC documentation.
• Assist with audits, compliance and data calls.
• Help develop and maintain authorization processes.

Skills

RMF knowledge and RMF processes

NIST SP 800-53 familiarity

ATO package development

Security documentation review

Stakeholder communication

Independent work

Education

Bachelor’s degree in a related field

Tools

CSAM / GRC tools

Job description

SkyePoint Decisions is seeking a Junior Security Control Assessor to support the DoED CPSS in Washington, DC. This is a remote role with responsibilities around RMF, ATOs, and continuous monitoring. You will review security documentation and coordinate with stakeholders to ensure timely authorization and compliance.

The position requires a bachelor’s degree and 3–5 years of related experience, plus security certifications. U.S.