Security Control Assessor

DivIHN Integration Inc; Oak Ridge (TN); On-site; USD 90,000 - 140,000; Full time

Job summary

DivIHN Integration Inc seeks a Security Control Assessor to support its cybersecurity program in Oak Ridge, TN. The role focuses on RMF authorization, SSP/POA&M development, vulnerability monitoring, and remediation coordination for DoD-related systems.

The candidate should have hands-on RMF/ATO experience, familiarity with NIST SP 800-37/800-53, and CNSSI 1253 exposure. U.S. citizens and DoD compliance are required; onsite work within 50 miles of the client site is expected.

Qualifications

• Hands-on RMF and ATO experience; SSPs and POA&Ms developed or maintained.
• Strong understanding of NIST SP 800-37 and NIST SP 800-53.
• CNSSI 1253 experience is a plus.
• Security controls aligned with baselines and organizational requirements.

Responsibilities

• Support RMF/system authorization activities and ensure delivery of SSPs and POA&Ms.
• Monitor security posture, identify risks and compliance gaps.
• Coordinate remediation with system stakeholders and track POA&Ms.
• Assess security impact of system changes and support configuration/change management.

Skills

RMF/ATO experience

SSP/POA&M development

NIST SP 800-37

NIST SP 800-53

CNSSI 1253

Job description

Title: Security Control Assessor

Location: Oak Ridge, TN

Duration: 12 Months

Note:

• Candidates must currently reside within 50 miles of the client site
• Candidates must have an ACTIVE DOE Q clearance OR an active equivalent clearance that can reciprocate to a Q.

Only W2 candidates are eligible for this position. Third-party or C2C candidates will not be considered.

This position requires U.S. Citizens only to meet the DoD requirements

Job Description:

Scope:

• Client is looking for experienced Security Control Assessors supporting its Cybersecurity Program. These individuals will support RMF/system authorization activities, develop and maintain SSPs and POA&Ms, monitor security posture and vulnerabilities, coordinate remediation, assess the security impact of system changes, support continuous monitoring, and prepare systems for assessments, audits, and Authorizing Official reviews.
• A key deliverable is the delivery of System Security Plans to the client Field Office for Approval to Operate (ATO).

Technical Experience

• Please prioritize candidates with hands-on experience taking systems through RMF and ATO processes, particularly candidates who have personally developed or maintained SSPs and POA&Ms.
• Candidates need a firm understanding of NIST SP 800-37 and NIST SP 800-53. CNSSI 1253 experience is a plus. We are looking for genuine system security/authorization experience, not simply general cybersecurity or SOC experience.

Knowledge, Skillset, and Abilities (KSAs)

• Implements and maintains security controls aligned with approved baselines and organizational requirements.
• Supports system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
• Monitors system security posture and identifies risks, vulnerabilities, and compliance gaps.
• Tracks and manages POA&Ms and coordinates remediation activities with system stakeholders.
• Assesses the security impact of system changes and supports configuration and change management processes.
• Supports continuous monitoring activities, including vulnerability management and security reporting.
• Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
• Prepares systems for security assessments, audits, and Authorizing Official reviews.

Experience

• Technical Field Experience weighted greater than minimum education

About us:

DivIHN, the 'IT Asset Performance Services' organization, provides Professional Consulting, Custom Projects, and Professional Resource Augmentation services to clients in the Mid-West and beyond. The strategic characteristics of the organization are Standardization, Specialization, and Collaboration.

DivIHN is an equal opportunity employer. DivIHN does not and shall not discriminate against any employee or qualified applicant on the basis of race, color, religion (creed), gender, gender expression, age, national origin (ancestry), disability, marital status, sexual orientation, or military status.