Security Controls & Compliance Lead

Edgewater Federal Solutions; Oak Ridge (TN); On-site; USD 90,000 - 130,000; Full time

Job summary

Edgewater Federal Solutions seeks a Security Control Assessor to join our Oak Ridge team. You will implement and maintain security controls, prepare SSPs and POA&Ms, monitor posture, track remediation, and coordinate with stakeholders. Candidates should have an associate degree with 5–10 years of relevant experience, be a U.S.

citizen, and possess knowledge of NIST SP 800-37/800-53; CNSSI 1253 is a plus. This role requires strong communication with vendor teams and readiness for security

Qualifications

• US Citizenship is required per contract.
• Firm understanding of NIST SP 800-37 and NIST SP 800-53.
• CNSSI 1253 experience a plus.

Responsibilities

• Implements and maintains security controls aligned with baselines and organizational requirements.
• Supports system authorization activities, including SSPs and POA&Ms.
• Monitors system security posture, identifies risks, vulnerabilities, and compliance gaps.
• Tracks and manages POA&Ms and coordinates remediation with system stakeholders.
• Assesses the security impact of system changes and supports configuration and change management processes.
• Supports continuous monitoring activities, including vulnerability management and reporting.
• Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
• Prepares systems for security assessments, audits, and Authorizing Official reviews.

Skills

NIST SP 800-37/800-53

Vendor coordination

Security controls

Education

Associate's degree

Job description

Edgewater Federal Solutions seeks a Security Control Assessor to join our Oak Ridge team. You will implement and maintain security controls, prepare SSPs and POA&Ms, monitor posture, track remediation, and coordinate with stakeholders. Candidates should have an associate degree with 5–10 years of relevant experience, be a U.S.

citizen, and possess knowledge of NIST SP 800-37/800-53; CNSSI 1253 is a plus. This role requires strong communication with vendor teams and readiness for security