Senior RMF Security Control Assessor | TS/SCI Eligible

Pueo Business Solutions LLC; McLean (VA); Presencial; USD 140.000 - 210.000; Jornada completa

Descripción de la vacante

Pueo Business Solutions LLC in the United States is seeking a highly experienced RMF Security Control Assessor (Expert) to conduct comprehensive assessments of security controls and produce authoritative documentation. The role requires strong RMF, NIST, and SA&A knowledge and involves advising key stakeholders on impact levels.

The ideal candidate will manage RMF artifacts, coordinate with program offices, and stay ahead of evolving IC policies to refine inspection protocols and security

Formación

• Security professional with RMF and NIST 800-series knowledge.
• Experience documenting SSP, SAR, SAP, and other RMF artifacts.
• Top-Secret clearance with SCI eligibility and CI Poly.
• Bachelor's degree or 16+ years of combined experience.
• Certifications: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP.

Responsabilidades

• Conduct comprehensive RMF assessment of information systems and prepare BoE, SSP, SAR, POA&M, and ATO Letter.
• Advise stakeholders on security categorization and impact levels.
• Support A&A RMF process for client systems and ensure documentation validity.
• Lead TEMs with other security professionals and present findings.
• Stay current with IC policy trends to refine inspection protocols.
• Interact with program offices and data owners for security control decisions.

Conocimientos

RMF expertise

NIST 800-series guidance

SA&A processes

Continuous Monitoring

POA&M policies

Vulnerability scanning tools

Stakeholder communication

Leadership

Interpersonal skills

Educación

Bachelor's degree in related field

16+ years total experience

Herramientas

XACTA

STIGS

ACAS

PRISMA

Splunk

Trellix HBSS

Descripción del empleo

Pueo Business Solutions LLC in the United States is seeking a highly experienced RMF Security Control Assessor (Expert) to conduct comprehensive assessments of security controls and produce authoritative documentation. The role requires strong RMF, NIST, and SA&A knowledge and involves advising key stakeholders on impact levels.

The ideal candidate will manage RMF artifacts, coordinate with program offices, and stay ahead of evolving IC policies to refine inspection protocols and security