RMF Security Control Assessor - Cybersecurity Evaluator

Y-12 National Security Complex; Oak Ridge (TN); On-site; USD 110,000 - 150,000; Full time

Job summary

Y-12 National Security Complex is seeking a Security Control Assessor to perform comprehensive assessments of Federal information systems in support of the A&A process. You will review security controls, document findings, and provide evidence-based remediation guidance, collaborating with ISSOs, System Owners, and cybersecurity teams to ensure RMF compliance.

The role emphasizes strong analytical skills, formal RMF knowledge, and the ability to communicate complex results to both technical and

Qualifications

• Bachelor's degree required in engineering, computer science, mathematics, information technology, or related discipline.
• Eight or more years of relevant education, training, and/or progressive experience may satisfy requirements.
• Certification in Security+ or higher is preferred (CEH/CISSP/CISM).

Responsibilities

• Conducts security control assessments according to NIST SP 800-53A procedures and organizational methods.
• Evaluates control implementation and effectiveness aligned with baselines and NIST standards.
• Develops security assessment reports with findings, evidence, and risk determinations.
• Performs gap analysis to identify deficiencies and non-compliance; collaborates with teams to gather evidence.
• Assesses Plans of Action and Milestones (POA&Ms) for remediation strategies.

Skills

Security control assessments

NIST RMF

NIST SP 800-53/53A

Technical writing

Security+

CEH

CISSP

CISM

Education

Bachelor's degree in engineering, computer science, mathematics, information technology

Job description

Y-12 National Security Complex is seeking a Security Control Assessor to perform comprehensive assessments of Federal information systems in support of the A&A process. You will review security controls, document findings, and provide evidence-based remediation guidance, collaborating with ISSOs, System Owners, and cybersecurity teams to ensure RMF compliance.

The role emphasizes strong analytical skills, formal RMF knowledge, and the ability to communicate complex results to both technical and