Security Controls Assessor - Intermediate (NIST 800-37)

Rividium; St. Louis (MO); On-site; USD 90,000 - 120,000; Full time

Job summary

RiVidium is seeking a Security Control Assessor (Intermediate) to independently assess management, operational, and technical security controls in IT environments in accordance with NIST 800-37. The role involves planning, reviewing, and documenting risk and security controls across systems and networks.

Ideal candidates hold a Bachelor’s degree or higher in a relevant field, IAT Level 2 cert, and TS/SCI clearance.

Qualifications

• Bachelor or higher in CS, Cyber Security, IT, Software Engineering, Information Systems, or Computer Engineering or related field.
• IAT Level 2 certification is required.
• Clearance- TS/SCI is required.

Responsibilities

• Manage and approve Accreditation Packages and security documentation.
• Plan and conduct security authorization reviews for initial installations.
• Review authorization documents to confirm risk levels are acceptable for each software, system, and network.
• Verify security postures are implemented as stated and document deviations, recommending corrective actions.
• Develop security compliance processes and audits for external services (e.g., cloud providers, data centers).
• Perform risk analysis for major changes and contribute to Risk Governance.

Skills

Vulnerability analysis

Security documentation

Risk assessment

Communication skills

Analytical thinking

Threat modeling

Education

Bachelor's degree or higher

IAT Level 2 cert

Job description

RiVidium is seeking a Security Control Assessor (Intermediate) to independently assess management, operational, and technical security controls in IT environments in accordance with NIST 800-37. The role involves planning, reviewing, and documenting risk and security controls across systems and networks.

Ideal candidates hold a Bachelor’s degree or higher in a relevant field, IAT Level 2 cert, and TS/SCI clearance.