RMF Security Assessment Lead (Hybrid/Remote)

Connected Logistics; Washington (District of Columbia); Hybrid; USD 155,000 - 165,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Job summary

Connected Logistics seeks an Assessment Lead to drive Security Control Assessments under RMF for DoS systems. You will provide technical leadership, develop assessment plans, and ensure evidence-based determinations of control effectiveness, aligned with NIST and FISMA requirements.

As a key contractor lead, you will coordinate with government personnel, prepare SARs, and guide teams through assessment activities to support authorization and risk-based decisions.

Qualifications

• Bachelor's in computer science, IT, cybersecurity or related field and 8+ years conducting security control assessments.
• Demonstrated experience with NIST SP 800-53A assessment procedures.
• Active CISSP, CISA or equivalent, and CEH or equivalent penetration testing certification.

Responsibilities

• Lead and serve as primary contractor lead for Security Control Assessment activities.
• Plan, coordinate, and oversee Security Control Assessments across information systems.
• Develop and maintain SAPs including scope, controls, procedures and ROE.
• Ensure assessments comply with NIST SP 800-37/53/53A and FISMA requirements.
• Lead SARs, risk summaries, and executive-level briefings with government stakeholders.
• Coordinate with System Owners, ISSOs, ISSMs, admins, and security teams.

Skills

Security leadership

RMF Assessments

NIST SP knowledge

Evidence-based testing

Education

Bachelor's degree in CS/IT/cybersecurity

Tools

NIST SP 800-37

NIST SP 800-53

NIST SP 800-53A

Job description

Connected Logistics seeks an Assessment Lead to drive Security Control Assessments under RMF for DoS systems. You will provide technical leadership, develop assessment plans, and ensure evidence-based determinations of control effectiveness, aligned with NIST and FISMA requirements.

As a key contractor lead, you will coordinate with government personnel, prepare SARs, and guide teams through assessment activities to support authorization and risk-based decisions.