Security Control Assessor - RMF/NIST Expert

Koniag Government Services; Washington (District of Columbia); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

medical insurance

dental insurance

vision insurance

401(k) retirement plan

paid time off

paid parental leave

life and disability insurance

flexible spending accounts

commuter benefits

tuition reimbursement

Job summary

Koniag Operations Services, LLC, a Koniag Government Services company, seeks a Security Control Assessor to support a federal government client. Primary work at client site in Washington DC with approved remote/telework locations.

You will assess security/privacy controls across on-prem, cloud, and hybrid environments per NIST SP 800-53 Rev 5 and RMF. The role requires developing SAPs, SARs, OA support, and continuous monitoring artifacts, coordinating with ISSOs and system owners, and

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity from accredited college or uni.
• Minimum of 5 years of federal information security experience.
• Hands-on experience with NIST SP 800-53 security/privacy controls and RMF.
• Experience developing SAPs, SARs, AARs, and POAMs per RMF.
• Ability to assess Windows/UNIX, networks, apps, databases, cloud.
• Proficient with GRC tools for documentation and tracking.

Responsibilities

• Plan, execute, and report security/privacy controls assessments for federal systems.
• Develop SAPs, SARs, POAMs; support ATO activities and OA evaluations.
• Collaborate with ISSOs, system owners, and stakeholders across complex boundaries.
• Produce thorough assessment artifacts with technical depth and accuracy.
• Support OA testing, continuous monitoring, and compliance reporting.

Skills

NIST SP 800-53 Rev 5

NIST SP 800-53A Rev 5

RMF

Security assessment

SAP/SAR/POAM

Ongoing Authorization OA

GRC tooling

Windows/UNIX

Cloud/Hybrid IT

Federal compliance

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

GRC tools

Vulnerability scanning

OA tooling

Job description

Koniag Operations Services, LLC, a Koniag Government Services company, seeks a Security Control Assessor to support a federal government client. Primary work at client site in Washington DC with approved remote/telework locations.

You will assess security/privacy controls across on-prem, cloud, and hybrid environments per NIST SP 800-53 Rev 5 and RMF. The role requires developing SAPs, SARs, OA support, and continuous monitoring artifacts, coordinating with ISSOs and system owners, and