Security Control Assessor: RMF & A&A Specialist

Chenega Agile Real Time Solutions, LLC; Oakton (VA); On-site; USD 132,000 - 185,000; Full time

Job summary

Chenega MIOS in Oakton, VA seeks a Security Control Assessor (SCA) to evaluate security controls for information systems. You will serve as the primary liaison between system owners and security stakeholders, guiding RMF and A&A processes while ensuring policy alignment and timely approvals.

The role emphasizes proactive customer engagement, clear communication of security requirements, and collaboration with ISSMs, AOs, and engineering teams to balance mission value with risk.

Qualifications

• Bachelor’s degree OR an equivalent combination of education and IT experience.
• Minimum 5 years in cybersecurity compliance, RMF support, or system accreditation.
• Current DoD 8140/8570 baseline IAM Level II+ certification.
• U.S. citizen with active TS/SCI clearance.
• Ability to pass background and drug screening.

Responsibilities

• Act as primary security liaison for IT and mission teams on security implications.
• Guide requests through A&A and RMF processes per CNSSI and NIST 800-53.
• Interpret and communicate security policies to facilitate alignment.
• Assist in obtaining approvals, exceptions, and deviations.
• Work with ISSMs, AOs, and engineering to explain risk mitigation.
• Provide day-to-day support for security activities needing coordination.
• Review technical requests and prepare materials for review boards.
• Track RMF packages and documentation status.
• Help mature internal security processes for recurring tasks.
• Perform other duties as assigned.

Skills

RMF process

NIST SP 800-53

Stakeholder communication

Risk mitigation

Documentation

Customer service

Education

Bachelor's degree in a related field

Associate degree + 2+ years IT experience

High school diploma + 4+ years IT experience

Tools

IAM Level II baseline certification (CAP/CISSP)

Job description

Chenega MIOS in Oakton, VA seeks a Security Control Assessor (SCA) to evaluate security controls for information systems. You will serve as the primary liaison between system owners and security stakeholders, guiding RMF and A&A processes while ensuring policy alignment and timely approvals.

The role emphasizes proactive customer engagement, clear communication of security requirements, and collaboration with ISSMs, AOs, and engineering teams to balance mission value with risk.