RMF Security Control Assessor — Hybrid (Arlington)

Jobvite, Inc.; Arlington (VA); Hybrid; USD 110,000 - 145,000; Full time

Benefits offered by this job

Security clearance support

Job summary

VMD Corp, now part of Xcelerate Solutions, is seeking a Security Control Assessor to oversee cybersecurity for a program, organization, system, or enclave. You will advise on security/privacy controls and collaborate with system owners to maintain a strong posture.

Responsibilities include risk assessments, control selection, monitoring strategy development, and updating security plans and artifacts. Hybrid Arlington, VA location with required clearances and federal experience.

Qualifications

• Demonstrated knowledge of cyber legal, regulatory, and policy frameworks (RMF, FedRAMP, NIST SP 800-53/800-171).
• Experience applying RMF/NIST frameworks to ensure security compliance.
• Familiarity with security authorization artifacts (SSPs, SARs, POA&Ms) and risk assessments.

Responsibilities

• Identify security/privacy requirements and system boundaries.
• Collaborate with System Owner to categorize systems and document results.
• Identify stakeholders with security/privacy interests across the system lifecycle.
• Conduct ongoing risk assessments and update plans and milestones.
• Select controls and document functional descriptions for security implementations.
• Develop monitoring strategies and coordinate with organizational monitoring efforts.
• Develop and approve plans to assess controls and document changes.
• Respond to risk posture from monitoring results and POA&Ms.
• Update security plans, assessment reports, and remediation plans.
• Review security status to ensure residual risk remains acceptable.
• Report security posture to authorizing officials according to monitoring strategy.

Skills

RMF/NIST SP 800-53

FedRAMP

Security Control Assessments

Risk Management

Cybersecurity Frameworks

Education

Bachelor's degree in Cyber-related field

Job description

VMD Corp, now part of Xcelerate Solutions, is seeking a Security Control Assessor to oversee cybersecurity for a program, organization, system, or enclave. You will advise on security/privacy controls and collaborate with system owners to maintain a strong posture.

Responsibilities include risk assessments, control selection, monitoring strategy development, and updating security plans and artifacts. Hybrid Arlington, VA location with required clearances and federal experience.