Security Control Assessor: RMF & DoD Compliance Expert

Insight Global; Shiloh (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

Insight Global is seeking a seasoned RMF and cybersecurity specialist to lead independent security control assessments and RMF documentation reviews for DoD/federal environments.

You will perform IV&V in eMASS, develop PRRs, coordinate authorization packages, and advise on risk acceptance and remediation actions, working with ISSOs, system owners, and government stakeholders to ensure successful authorizations.

Qualifications

• 2+ years in security engineering, network engineering, or architecture.
• Experience with cloud environments (AWS, Azure, GCP).
• Hands-on enterprise security technologies and frameworks (RMF, NIST, FedRAMP).
• Active Secret Clearance and IA Level III certification preferred.
• Experience supporting DoD or federal government environments.

Responsibilities

• Conduct independent security control assessments for management, operational, technical, and privacy controls.
• Review RMF documentation (SSPs, POA&Ms, security packages).
• Assess artifacts, identify cybersecurity risks and control deficiencies.
• Perform IV&V in eMASS to ensure controls are implemented and effective.
• Provide risk remediation and authorization recommendations.
• Support SCA activities, AO package prep, and leadership review docs.
• Coordinate authorization packages and MRPs for government stakeholders.
• Review RMF submissions and document deficiencies with PRRs.
• Track authorization status through submission to approval/denial.

Skills

Network security

Cloud platforms

SIEM / analytics

RMF / NIST knowledge

Zero Trust Architecture

DoD / federal compliance

Active Secret Clearance

Tools

eMASS

Splunk

Palo Alto

Zscaler

Cisco security

Microsoft Security

Job description

Insight Global is seeking a seasoned RMF and cybersecurity specialist to lead independent security control assessments and RMF documentation reviews for DoD/federal environments.

You will perform IV&V in eMASS, develop PRRs, coordinate authorization packages, and advise on risk acceptance and remediation actions, working with ISSOs, system owners, and government stakeholders to ensure successful authorizations.