RMF Security Assessment Lead

ADP, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Paragon Technology Group seeks an experienced Assessment Lead to support the DoS Bureau of Diplomatic Technology, Enterprise Applications cybersecurity program under ISCA. You will oversee Security Control Assessments, develop SAPs and SARs, and ensure evidence-based determinations of control effectiveness.

Responsibilities include planning assessments, coordinating with System Owners and government stakeholders, leading entrance and exit briefings, and guiding remediation verification to

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, or related field.
• Minimum eight (8) years of professional cybersecurity, information assurance, RMF, or related experience.
• CISSP, CISA, or equivalent certification.
• CEH or equivalent penetration-testing certification.
• Experience leading or performing Security Control Assessments in Federal environments.

Responsibilities

• Serve as the primary contractor lead for Security Control Assessment activities.
• Plan, coordinate, and oversee Security Control Assessments across systems and environments.
• Develop and manage assessment schedules, milestones, and stakeholder coordination.
• Lead SAPs and ROEs creation, including scope, controls, and evidence requirements.
• Ensure compliance with NIST SP 800-37/53/53A and FISMA requirements.
• Provide technical direction to assessment teams and review evidence.

Skills

Technical leadership

Strong writing and communication

Education

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, or related field

Job description

Paragon Technology Group seeks an experienced Assessment Lead to support the DoS Bureau of Diplomatic Technology, Enterprise Applications cybersecurity program under ISCA. You will oversee Security Control Assessments, develop SAPs and SARs, and ensure evidence-based determinations of control effectiveness.

Responsibilities include planning assessments, coordinating with System Owners and government stakeholders, leading entrance and exit briefings, and guiding remediation verification to