RMF Security Control Lead — Cloud & DoD Expert

Njvc LLC; Arlington, Northern (VA, KY); Hybrid; USD 165,000 - 213,000; Full time

Job summary

Chenega MIOS is seeking a Lead Senior Security Control Assessor to support DoD and government clients in Arlington, VA. The role focuses on RMF/SA&A processes, continuous monitoring strategy, and incident/resilience planning across information systems.

Responsibilities include SAP and SAR/SSP documentation, risk assessment, and coordination with A&A leadership to ensure compliant authorization packages. A TS clearance with SCI eligibility is required.

Qualifications

• Bachelor’s degree or equivalent with 5+ years of relevant experience
• DOD 8140 IAM Level II (CAP, CASP, CISM, CISSP, GSLC, CCISO) required
• Top Secret clearance with SCI eligibility is required
• At least 5 years of relevant experience in RMF/DoD IAC/IA
• Experience with cloud security authorizations (FedRAMP, AWS, Azure)

Responsibilities

• Advise the A&A Manager on impact levels for Confidentiality, Integrity, and Availability
• Conduct a SAP for each package assessment
• Ensure security assessments are completed for each IS and package on target date
• Initiate POA&M with weaknesses and suspense dates from SAR
• Evaluate security documentation and provide written recommendations for security authorization
• Develop a continuous monitoring plan specific to the information system
• Support cloud-based security authorizations (FedRAMP, AWS, Azure)
• Prepare Security Assessment Plans, Security Assessment Reports, and Executive-level briefings

Skills

RMF 800-37

Continuous monitoring 800-137

NIST 800-series

FISMA

POA&M

Security assessment (SA&A)

Risk management

Microsoft Office

Cloud security (FedRAMP/AWS/Azure)

Education

Bachelor’s degree

Associate’s degree + 2+ years

High school diploma or GED

Tools

SAP/JSIG

Security documentation (SSP/SAR/SAP)

Vulnerability scanning tools

POA&M tracking tools

Job description

Chenega MIOS is seeking a Lead Senior Security Control Assessor to support DoD and government clients in Arlington, VA. The role focuses on RMF/SA&A processes, continuous monitoring strategy, and incident/resilience planning across information systems.

Responsibilities include SAP and SAR/SSP documentation, risk assessment, and coordination with A&A leadership to ensure compliant authorization packages. A TS clearance with SCI eligibility is required.