Remote Senior Security Controls Assessor – NIST RMF Expert

ecsfederal; Virginia (MN); Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Remote work

Job summary

Everforth ECS Federal is seeking a Senior Security Controls Assessor to work remotely, preferably near the National Capital Region, for a premier federal civilian program. You will support assessment, authorization, and continuous monitoring of information systems under NIST RMF and IRS 1075, collaborating with owners, security staff, and stakeholders to reduce risk enterprise-wide.

The role involves preparing SA&A artifacts, validating control implementations, and delivering clear, actionable

Qualifications

• 7+ years of hands-on experience conducting security control assessments in federal environments.
• Active Public Trust clearance or ability to obtain one.
• U.S. Citizenship required.
• Bachelor's degree in Cybersecurity, IT, CS, or related field or equivalent professional experience.
• CISSP, CISM, or CISA preferred.

Responsibilities

• Support the review and maintenance of SA&A artifacts, including SSPs, SAPs and SARs.
• Analyze inventories, network diagrams, data flows, and test reports to evaluate control effectiveness.
• Develop guidance to maintain compliance with NIST SP 800-53 and IRS Publication 1075.
• Present findings and remediation recommendations to technical and non-technical stakeholders.
• Review and update information security policies to align with federal regulations.
• Conduct stakeholder interviews to document procedures and validate controls.
• Analyze legislation and guidance to identify required policy updates and program improvements.
• Research emerging technologies to inform security policy development.
• Serve as liaison between client personnel and assessment teams.

Skills

Security control assessments

NIST RMF

Federal compliance

Stakeholder communication

Policy development

Education

Bachelor's degree or equivalent

Job description

Everforth ECS Federal is seeking a Senior Security Controls Assessor to work remotely, preferably near the National Capital Region, for a premier federal civilian program. You will support assessment, authorization, and continuous monitoring of information systems under NIST RMF and IRS 1075, collaborating with owners, security staff, and stakeholders to reduce risk enterprise-wide.

The role involves preparing SA&A artifacts, validating control implementations, and delivering clear, actionable