RMF Security Control Assessor (Mid) | Impact & Compliance

Quantum Sky; Washington (District of Columbia); Sur place; USD 95 000 - 109 000; Plein temps

Avantages offerts par ce poste

Health/Dental/Vision

401(k) match

Paid Time Off

Professional development

Résumé du poste

Quantum Sky is seeking a Security Control Assessor (Mid) to support a federal customer in Washington, DC. You will evaluate information systems for FISMA/NIST compliance, conduct control assessments, and communicate risk clearly.

The role requires strong analytical, organizational, and communication skills, collaboration with system owners and technical teams, and thorough documentation of assessment results with actionable recommendations.

Qualifications

• Bachelor's degree and at least four (4) years of experience supporting cybersecurity, information assurance, or GRC within the RMF lifecycle.
• PMP, ISO 27001, or CISM certifications equate to 3 years of experience each.
• ITIL, CISSP, or other IT management certifications equate to 2 years of experience each.
• Thorough knowledge of FISMA, RMF, and SA&A processes.
• Experience assessing security controls and evaluating safeguards.
• Ability to communicate risk effectively and recommend corrective actions.

Responsabilités

• Support RMF steps 4–assess, 5–authorize, 6–monitor controls; conduct system security assessments.
• Produce quality security assessment deliverables; ensure content is subject-specific, complete and accurate.
• Develop and execute a security and privacy assessment plan for each project.
• Create and maintain test cases for security assessment testing.
• Perform security testing at control-requirement level for each system component.
• Review and analyze security tool reports for residual risk and accuracy.
• Document findings and provide concise, actionable recommendations.
• Perform client/System risk analyses per NIST SP 800-30 and client policy; summarize in SAR and briefing.

Connaissances

RMF knowledge

FISMA/NIST expertise

Technical writing

Communication

Security assessment

Collaboration

Detail-oriented

Formation

Bachelor's degree in a related field

High school diploma with 8 years experience substitution

Outils

GRC Tools (ServiceNow)

CSAM

Description du poste

Quantum Sky is seeking a Security Control Assessor (Mid) to support a federal customer in Washington, DC. You will evaluate information systems for FISMA/NIST compliance, conduct control assessments, and communicate risk clearly.

The role requires strong analytical, organizational, and communication skills, collaboration with system owners and technical teams, and thorough documentation of assessment results with actionable recommendations.