Security Controls & RMF Assessment Analyst

CALIBRE Systems, Inc.; Denver (CO); On-site; USD 99,000 - 121,000; Full time

Job summary

CALIBRE Systems Inc., an employee-owned mission-focused solutions and digital transformation company seeks a Security Control Assessor (Mid-level) to conduct independent assessments of management, operational, and technical security controls across IT systems to determine overall effectiveness per NIST 800-37.

The role includes planning and conducting security authorization reviews, reviewing risk documents, identifying gaps, developing risk mitigation plans, and ensuring action plans are in

Responsibilities

• Manage and approve Accreditation Packages.
• Plan and conduct security authorization reviews and assurance case development for initial installation of systems and networks.
• Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
• Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).
• Establish acceptable limits for the software application, network, or system.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.
• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
• Provide input to the Risk Management Framework (RMF) process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
• Verify and update security documentation reflecting the application/system security design features.
• Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risk.
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization's mission and goals.
• Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment.

Job description

CALIBRE Systems Inc., an employee-owned mission-focused solutions and digital transformation company seeks a Security Control Assessor (Mid-level) to conduct independent assessments of management, operational, and technical security controls across IT systems to determine overall effectiveness per NIST 800-37.

The role includes planning and conducting security authorization reviews, reviewing risk documents, identifying gaps, developing risk mitigation plans, and ensuring action plans are in