Senior NIST Security Assessor & Risk Specialist

Business Integra; Washington (District of Columbia); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

SmartRecruiters, Inc. seeks a security professional with direct experience in NIST security control assessments and SSP development to support federal compliance programs in the Washington, DC area.

The role focuses on NIST-based risk assessments, communicating with system owners and executives, and a consulting mindset. Familiarity with IT and cloud concepts, privacy considerations, and independent work is highly valued.

Qualifications

• Direct experience with NIST security control assessments.
• Direct experience in System Security Plan (SSP) development.
• Direct experience conducting or supporting NIST-based risk assessments.
• Demonstrated success interfacing directly with system owners and executive management levels.
• Demonstrable excellence in written and verbal communications (samples may be requested).
• A demonstrated consulting mentality, and the professional habit of treating all others as direct customers.
• Demonstrable understanding of basic Information Technology concepts (networking, access control, server functions), as well as cloud concepts.
• Demonstrable understanding of privacy concepts as they apply to security assessment as outlined in NIST’s appendix J of 800.53.
• The ability to conduct the following tasks without supervision:

Responsabilités

• Conducting Security Control Assessments and testing
• System Security Plan (SSP) Review, Evaluation, Creation
• Plan of Action and Milestones (POA&M)
• Security Assessment Report (SAR)
• SA&A or Security Assessment and Authorization (or C&A)
• Contingency Plan Development or Evaluation
• Secondary areas of interest for this role: McAfee Vulnerability Manager

Connaissances

NIST controls

SSP development

NIST risk assessments

Communication skills

Consulting mindset

IT concepts

Cloud concepts

Privacy concepts

Independent work

Description du poste

SmartRecruiters, Inc. seeks a security professional with direct experience in NIST security control assessments and SSP development to support federal compliance programs in the Washington, DC area.

The role focuses on NIST-based risk assessments, communicating with system owners and executives, and a consulting mindset. Familiarity with IT and cloud concepts, privacy considerations, and independent work is highly valued.