Security Controls Assessor – A&A & FISMA Expert

US National Institute of Standards and Technology; Gaithersburg (MD); On-site; USD 75,000 - 95,000; Full time

Job summary

The US National Institute of Standards and Technology seeks a Security Control Assessor to lead robust Assessment and Authorization (A&A) activities, ensure Federal Information Security Management Act (FISMA) compliance, and act as a vital line of defense in mitigating IT security risks across the agency.

This notice is issued under direct-hire authority to recruit new talent to occupations for which NIST has a severe shortage of candidates.

Qualifications

• Requires active IT security certification (CISSP, GISA etc.).
• Specialized experience equivalent to GS-12 level (ZP-III at NIST).
• Experience developing security docs and reviewing authorization packages.

Responsibilities

• Lead A&A activities and security assessments.
• Ensure FISMA compliance and mitigate IT security risks across the agency.
• Review security authorization packages and related documentation.

Skills

Security assessments

Documentation

Risk assessment

Security controls

Education

IT Security Certification (CISSP, GIA, SSCP, CEH, GCIH, CISA, CGRC)

Job description

The US National Institute of Standards and Technology seeks a Security Control Assessor to lead robust Assessment and Authorization (A&A) activities, ensure Federal Information Security Management Act (FISMA) compliance, and act as a vital line of defense in mitigating IT security risks across the agency.

This notice is issued under direct-hire authority to recruit new talent to occupations for which NIST has a severe shortage of candidates.