Senior RMF Security Controls Specialist

Strategic Analysis, Inc.; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Strategic Analysis, Inc. seeks an experienced Senior Security Control Assessor (SCA) to support RMF activities, including assessment, authorization, and continuous monitoring of information systems for DoD/IC environments.

The role focuses on evaluating security controls, identifying risks, and supporting authorization decisions. Active TS/SCI w/ CI Poly is required, with up to 50% travel in the first year.

Qualifications

• 7+ years of cybersecurity experience supporting RMF/A&A activities.
• Experience in SCA, ISSM, ISSO, or ISSE roles is preferred.
• Strong knowledge of NIST RMF frameworks in advanced DoD/IC portfolios.
• Experience with GRC/RMF tools such as XACTA, eMASS, or ServiceNow (SNOW).

Responsibilities

• Assess the effectiveness of security controls in accordance with RMF.
• Perform security reviews to identify gaps in system architecture and design.
• Conduct risk analysis and develop mitigation recommendations.
• Execute security authorization reviews and support ATO decisions.
• Validate security posture of systems, networks, and applications.
• Monitor and evaluate compliance across information systems.
• Develop Statements of Risk (SORs) and document security findings.
• Provide authorization recommendations to the Authorizing Official (AO).

Skills

RMF/A&A

Risk analysis

GRC tools

IAM certs

DoD/IC knowledge

Education

Bachelor's degree or higher

Tools

XACTA

eMASS

ServiceNow (SNOW)

Job description

Strategic Analysis, Inc. seeks an experienced Senior Security Control Assessor (SCA) to support RMF activities, including assessment, authorization, and continuous monitoring of information systems for DoD/IC environments.

The role focuses on evaluating security controls, identifying risks, and supporting authorization decisions. Active TS/SCI w/ CI Poly is required, with up to 50% travel in the first year.