Remote Senior Security Controls Assessor, NIST RMF

ARETUM Holdings LLC; Bethesda (MD); Remote; USD 100,000 - 128,000; Full time

Benefits offered by this job

Health Care Plan

401k

Life Insurance

Paid Time Off

Family Leave

Disability Insurance

Training & Development

Job summary

ARETUM Holdings LLC is seeking a Senior Security Controls Assessor to conduct comprehensive security assessments of information systems for compliance with applicable controls and regulations. Due to federal contracting, candidates may handle CUI and must meet safeguarding requirements.

The role requires at least 3 years leading security control assessments, strong NIST RMF and ATO knowledge, and excellent communication.

Qualifications

• Minimum of 3 years leading security controls assessments.
• Experience performing assessments while supporting the federal government.
• Proficient understanding of NIST RMF.
• Expertise in NIST 800-53 Rev 5.
• Understanding of the ATO process.
• Strong communication and task management skills.
• BA/BS degree in Information Security or related preferred.
• Certifications: CISSP, CISM, CISA, or equivalent.
• CSAM/JCAM experience preferred.

Responsibilities

• Independently perform all aspects of the security controls assessment in alignment with NIST 800-53 Rev. 5.
• Ensure understanding and application of ATO documentation requirements.
• Coordinate testing with stakeholders and team lead.
• Develop a security assessment plan with input from stakeholders.
• Conduct and lead assessment interviews and tests and manage evidence.
• Provide actionable recommendations to improve security posture.

Skills

Security controls assessment

NIST RMF

ATO process

Communication

Task management

Education

BA/BS in Information Security or related

Tools

CISSP

CISM

CISA

Job description

ARETUM Holdings LLC is seeking a Senior Security Controls Assessor to conduct comprehensive security assessments of information systems for compliance with applicable controls and regulations. Due to federal contracting, candidates may handle CUI and must meet safeguarding requirements.

The role requires at least 3 years leading security control assessments, strong NIST RMF and ATO knowledge, and excellent communication.