Senior DoD RMF Security Control Assessor

Novul Solutions; Arlington (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid Time Off (PTO)

Holidays

401(k) match

Health insurance

Tuition/Training reimbursement

Job summary

Novul Solutions is seeking an experienced Security Control Assessor to support DoD cybersecurity assessment and authorization activities. The role focuses on conducting in-depth assessments, validating control implementation, and supporting ATO packages.

The ideal candidate brings extensive RMF, NIST, and JSIG knowledge and can clearly communicate findings and remediation requirements to system owners and stakeholders.

Qualifications

• Eight+ years in cybersecurity.
• Five+ years in Certification and Authorization/Assessment and Authorization.
• Expert knowledge of the DoD RMF.
• Strong knowledge of NIST SP 800-37/53, CNSSI 1253, JSIG.
• Experience conducting security control assessments and evaluating controls.
• Experience preparing ATO packages and supporting documentation.
• Leadership in assessment teams and communicating findings clearly.

Responsibilities

• Conduct security control assessments for DoD information systems per NIST SP 800-53 and RMF.
• Evaluate control implementation, document findings, risks, and remediation actions.
• Communicate mitigation requirements to owners and stakeholders.
• Assess system categorization and impact levels (High/Moderate/Low).
• Validate inherited controls and Ports/Protocols/Services requirements.
• Review security docs and evidence for accuracy and alignment.
• Lead review, preparation, and QA of ATO packages and RMF docs.
• Identify gaps and provide actionable remediation recommendations.
• Coordinate with system owners, engineers, and government stakeholders.
• Support Plans of Action and Milestones and risk-management documents.
• Provide leadership to assessment teams on complex issues.

Skills

DoD RMF

NIST SP 800-53/37

Leadership experience

Communication skills

Security assessment

Education

Bachelor’s degree in cybersecurity/IT/CS/IS/engineering

Job description

Novul Solutions is seeking an experienced Security Control Assessor to support DoD cybersecurity assessment and authorization activities. The role focuses on conducting in-depth assessments, validating control implementation, and supporting ATO packages.

The ideal candidate brings extensive RMF, NIST, and JSIG knowledge and can clearly communicate findings and remediation requirements to system owners and stakeholders.