Senior Cybersecurity Control Assessor - DC Onsite

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 113,000 - 238,000; Full time

Benefits offered by this job

Flexible time off

Comprehensive benefits

Learning resources

Job summary

Cybersecurity Jobs is seeking an experienced Security Controls Assessor to support FEMA OCISO in Washington, DC. You will conduct independent assessments of IT security controls, verify RMF alignment, and produce artifacts for security and compliance.

You will review SSPs, policies, and test evidence, identify gaps, and support corrective actions with IT and security teams. A Secret clearance and DHS/FEMA experience are preferred.

Qualifications

• BS/BA with 7+ years RMF, control assessment, audit, or cybersecurity compliance.
• Experience with NIST SP 800-53 Rev 5 and RMF.
• Strong analytical and written communication skills for security artifacts.

Responsibilities

• Assess effectiveness of IT security controls and verify compliance with NIST SP 800-53 Rev 5 and DHS RMF.
• Conduct control assessments within system boundaries across FEMA.
• Review SSPs, supporting policies, and evidence artifacts for completeness and accuracy.
• Identify security gaps, residual risk, and generate findings for assessments.

Skills

IT security controls

RMF

NIST SP 800-53

Interviews & testing

Security writing

Education

BS/BA

Tools

CSAM

RegScale

eMASS

GRC tools

Job description

Cybersecurity Jobs is seeking an experienced Security Controls Assessor to support FEMA OCISO in Washington, DC. You will conduct independent assessments of IT security controls, verify RMF alignment, and produce artifacts for security and compliance.

You will review SSPs, policies, and test evidence, identify gaps, and support corrective actions with IT and security teams. A Secret clearance and DHS/FEMA experience are preferred.