Security Control Assessor

RMantra Solutions; Virginia (MN); On-site; USD 100,000 - 130,000; Full time

Job summary

RMantra Solutions in Virginia, Minnesota is seeking a skilled cybersecurity professional who can address security controls, resilience, and reliability. The role requires communication with system owners regarding approved mitigation efforts aligned with the Risk Management Framework (RMF).

Responsibilities include in-depth assessments of DoD information systems and leading the preparation of Authorization to Operate (ATO) packages. The ideal candidate should have over 8 years in cybersecurity and expertise in NIST SP 800-53 and RMF processes.

Qualifications

• 8+ years of experience in Cybersecurity.
• 5+ years in Certification and Accreditation/Assessment and Authorization.
• Expert in RMF process.

Responsibilities

• Communicate government-approved mitigation and remediation.
• Understand and apply cybersecurity triad elements.
• Validate inherited security controls.
• Assess security in accordance with NIST SP 800-53.
• Lead the preparation of ATO packages.

Skills

Cybersecurity expertise

Leadership skills

RMF process knowledge

NIST SP 800-53 proficiency

Job description

We are looking for someone skilled in determining how security controls are addressed, including its resilience and reliability, and how changes in conditions, operations, or the environment will affect these outcomes.

Roles and Responsibilities:

• Individual should be able to communicate to system owners government-approved mitigation and remediation in support of the RMF process.
• Understand and apply the associated cybersecurity triad elements (i.e. Confidentiality, Integrity, or Availability) and associated categorization impact level (High, Moderate, Low) related to the controls for each program.
• Validate “Inherited” security controls from another hosted or connected system.
• Validate a program’s efforts to meet the controls associated with a system’s registered Ports, Protocols, and Services (PP&S) to include proper handling of log files.
• Provide in-depth security control assessments of DoD information systems in accordance with NIST SP 800-53 and DoD RMF policies, the JSIG.
• Lead the review and preparation of ATO packages, ensuring documentation accuracy and completeness.
• 8+ years experience in Cybersecurity area
• 5+ years Certification and Accreditation/ Assessment and Authorization
• Expert in RMF
• Demonstrated leadership skills/Previous lead position
• Proficient with RMF process, NIST SP 800-37, NIST SP 800-53, CNSSI 1253

Join a dynamic team where your ideas matter and your career thrives.