RMF Security Control Assessor (TS/SCI)

Insight Global; Denver (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

Insight Global is seeking a Security Control Assessor to support a federal customer in Denver, CO. This role conducts independent assessments of security controls within information systems to ensure RMF compliance and cybersecurity readiness.

You will work with cybersecurity, systems engineering, and program leadership to evaluate posture and risks. The ideal candidate has experience with ATO efforts, accreditation documentation, and risk management, using RMF tools such as eMASS or XACTA, and

Qualifications

• Requires TS/SCI clearance and IAM Level II or equivalent.
• Extensive RMF experience across all phases.
• Experience supporting ATO processes and risk assessments.
• Ability to develop and maintain POA&Ms and accreditation packages.
• Proficient with RMF tools (eMASS, XACTA) and STIGs.

Responsibilities

• Conduct independent assessments of security controls per RMF and NIST SP 800-37.
• Review accreditation packages supporting ATO efforts.
• Plan and execute security authorization reviews for systems and networks.
• Identify security gaps and provide remediation recommendations.
• Perform technical risk assessments and mitigation planning.
• Contribute to cybersecurity metrics, POA&Ms, and continuous monitoring.
• Validate implementation of controls and deviations from configurations.
• Engage in risk governance and recommend mitigations.
• Develop and maintain RMF documentation across system lifecycle.
• Assess cloud environments and external services for compliance.
• Collaborate with engineering teams to assess new systems impact on security.
• Provide recommendations to support accreditation decisions and authorization activities.

Skills

TS/SCI Clearance

IAM Level II cert

RMF knowledge

ATO process support

POA&M development

Security control assessment

Strong communication

Tools

eMASS

XACTA

RMF management tools

Job description

Insight Global is seeking a Security Control Assessor to support a federal customer in Denver, CO. This role conducts independent assessments of security controls within information systems to ensure RMF compliance and cybersecurity readiness.

You will work with cybersecurity, systems engineering, and program leadership to evaluate posture and risks. The ideal candidate has experience with ATO efforts, accreditation documentation, and risk management, using RMF tools such as eMASS or XACTA, and