Senior DoD RMF Security Control Assessor

novulsolutions; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

PTO: 10 days + 5 floating days

11 paid holidays

Health benefits: UnitedHealthcare PPO

Tuition and training reimbursement

Performance bonus

401(k) with 3% match

Job summary

novulsolutions is seeking an experienced Security Control Assessor to support DoD cybersecurity assessment and authorization activities for information systems. You will conduct in-depth security control assessments, validate implementations, review system security documentation, and help maintain complete ATO packages.

The ideal candidate has extensive DoD RMF experience, strong knowledge of NIST SP 800-53, JSIG, CNSSI 1253, and the ability to clearly communicate findings and remediation

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, engineering, or a related field.
• Eight or more years of professional experience in cybersecurity.
• Five or more years of experience supporting Certification and Accreditation or Assessment and Authorization activities.
• Expert-level knowledge of the DoD Risk Management Framework.
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and the JSIG.
• Experience conducting security control assessments and evaluating controls.
• Experience reviewing and preparing ATO packages and supporting documentation.
• Experience validating inherited controls and assessing Ports, Protocols, and Services requirements.
• Demonstrated leadership experience in a lead or senior assessment role.
• Strong written and verbal communication skills.

Responsibilities

• Conduct comprehensive security control assessments of DoD information systems per NIST SP 800-53 and RMF policies.
• Evaluate control implementation, document findings, risks, deficiencies, and corrective actions.
• Communicate remediation requirements to owners and stakeholders in RMF context.
• Assess system categorization and impact levels (High/Moderate/Low).
• Validate inherited controls from hosting environments and integrations.
• Review documentation for accuracy, completeness, and compliance.
• Lead the review and QA of ATO packages and RMF artifacts.
• Identify gaps and provide actionable remediation recommendations.
• Coordinate with owners, security personnel, engineers, and leadership throughout assessment lifecycle.
• Support Plans of Action and Milestones and risk-management docs.
• Provide leadership to assessment teams and resolve complex compliance issues.

Skills

DoD RMF

NIST SP 800-53

Security assessment

Writing and communication

leadership

Education

Bachelor’s degree in cybersecurity or related field

Job description

novulsolutions is seeking an experienced Security Control Assessor to support DoD cybersecurity assessment and authorization activities for information systems. You will conduct in-depth security control assessments, validate implementations, review system security documentation, and help maintain complete ATO packages.

The ideal candidate has extensive DoD RMF experience, strong knowledge of NIST SP 800-53, JSIG, CNSSI 1253, and the ability to clearly communicate findings and remediation