Security Controls Assessor — RMF/FedRAMP Expert (Hybrid)

Vmdsystems; Arlington (VA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

VMD Corp, now part of Xcelerate Solutions, seeks a Security Control Assessor to oversee cybersecurity posture for a program, system, or enclave and partner with FDIC system owners. You will advise on security and privacy controls and help manage authorization artifacts such as SSPs, SARs, and POA&Ms.

The role requires 4–6 years of relevant cybersecurity experience, RMF/NIST/FedRAMP knowledge, and active public trust clearance. Hybrid in Arlington, VA area with federal client exposure.

Qualifications

• Bachelor's degree in a cyber-related field; direct experience or certifications may substitute.
• Strong knowledge of RMF, NIST SP 800-53, and FedRAMP.
• Experience developing security documentation such as SSPs, SARs, and POA&Ms.

Responsibilities

• Identify security and privacy requirements and determine system boundaries.
• Coordinate with System Owner to categorize the system and document results.
• Identify stakeholders with security/privacy interests for system development and sustainment.
• Conduct initial risk assessment and update ongoing risk assessments.
• Select controls and document functional descriptions in security/privacy plans.
• Develop and monitor plans to assess controls and coordinate with monitoring strategies.
• Update security plans, assessment reports, and POA&Ms from continuous monitoring results.
• Review security status to ensure acceptable risk; report to authorizing official.

Skills

RMF

NIST SP 800-53

FedRAMP

Risk management

Authorization artifacts

Education

Bachelor's Degree in Cyber-related field

Tools

Security assessment tools

Job description

VMD Corp, now part of Xcelerate Solutions, seeks a Security Control Assessor to oversee cybersecurity posture for a program, system, or enclave and partner with FDIC system owners. You will advise on security and privacy controls and help manage authorization artifacts such as SSPs, SARs, and POA&Ms.

The role requires 4–6 years of relevant cybersecurity experience, RMF/NIST/FedRAMP knowledge, and active public trust clearance. Hybrid in Arlington, VA area with federal client exposure.