Security Control Assessor: Elevate IT Security (Intermediate)

Rividium Inc; Springfield (VA); On-site; USD 135,000 - 140,000; Full time

Job summary

RiVidium Inc. is seeking a Security Control Assessor to conduct independent, comprehensive assessments of IT security controls to determine overall effectiveness as defined by NIST 800-37.

The role entails planning and executing security authorization reviews, verifying control implementations, documenting deviations, and developing risk mitigation strategies. The candidate will support risk governance processes, ensure remediation plans for vulnerabilities are in place, and contribute to

Qualifications

• Bachelor's degree or higher in a related field.
• IAT/IAM Level 2 certification.

Responsibilities

• Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
• Review authorization and assurance documents to confirm risk levels are acceptable for each software application, system, and network.
• Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend actions to correct deviations.
• Develop security compliance processes and audits for external services (e.g., cloud service providers, data centers).
• Perform security reviews and identify gaps in security architecture, providing risk mitigation recommendations.
• Provide input to Risk Management Framework activities and related documentation.
• Verify and update security documentation reflecting design features.
• Assist in risk governance by presenting security risks and mitigations.
• Ensure remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections.

Skills

Vulnerability analysis

Security assessments

Risk management

Technical writing

Communication skills

Education

Bachelor degree or higher

IAT/IAM Level 2 certification

Job description

RiVidium Inc. is seeking a Security Control Assessor to conduct independent, comprehensive assessments of IT security controls to determine overall effectiveness as defined by NIST 800-37.

The role entails planning and executing security authorization reviews, verifying control implementations, documenting deviations, and developing risk mitigation strategies. The candidate will support risk governance processes, ensure remediation plans for vulnerabilities are in place, and contribute to