Senior Security Control Assessment Lead

Paragon Technology; Washington (District of Columbia); On-site; USD 120,000 - 190,000; Full time

Job summary

Paragon Technology Group in Washington, DC seeks an experienced Assessment Lead to manage Security Control Assessments under the RMF and ISCA program for the Department of State. You will provide technical leadership, plan assessments, and ensure evidence-based determinations of control effectiveness.

You will oversee SAPs, SARs, ROEs, POA&Ms, and assessment artifacts, coordinate cross-functional teams, and communicate results to Government stakeholders.

Qualifications

• Bachelor's degree in cybersecurity, information technology, information systems, computer science, engineering, or a related technical discipline.
• 8+ years of relevant professional experience in cybersecurity, information assurance, security assessment, RMF, or related disciplines.
• CISSP, CISA, or equivalent certification.
• CEH or equivalent penetration-testing certification.
• Demonstrated experience leading or performing Security Control Assessments in Federal information-system environments.
• Experience with RMF, particularly RMF Step 4 – Assess.
• Knowledge of NIST SP 800-37, 800-53, 800-53A, and security testing methodologies.
• Experience developing/reviewing SAPs, SARs, POA&Ms, ROEs, control test cases, and assessment evidence.

Responsibilities

• Serve as the primary contractor lead for Security Control Assessment activities.
• Plan, coordinate, and oversee Security Control Assessments across systems and environments.
• Develop and manage assessment schedules, milestones, priorities, and stakeholder coordination.
• Lead development, review, and execution of SAPs and ROEs, including scope, controls, procedures, evidence, and timelines.
• Ensure assessments comply with Federal and Department requirements including NIST SPs and FISMA.
• Provide technical direction to Security Control Assessors and other personnel.
• Review SSPs, policies, configurations, vulnerability scans, and evidence.
• Ensure assessment conclusions are supported by objective evidence.
• Lead meetings and briefings with Government stakeholders.
• Coordinate with System Owners, ISSOs/ISSMs, and other stakeholders.
• Monitor progress and mitigate schedule risks and evidence gaps.
• Maintain independence and avoid conflicts in assessment activities.
• Perform QA reviews for accuracy and compliance.
• Lead preparation/delivery of SARs, risk summaries, executive briefings, and deliverables.
• Support remediation and retesting to verify closures.
• Validate mitigation strategies and update POA&Ms with stakeholders.
• Support authorization decisions with technical assessment information.
• Track findings and evidence to closure in Government repositories.

Skills

Security assessment leadership

Project coordination

Technical writing

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/IT/IS/CS/Engineering

Tools

RMF Guidance Tools

NIST SP 800-37/53/53A

Job description

Paragon Technology Group in Washington, DC seeks an experienced Assessment Lead to manage Security Control Assessments under the RMF and ISCA program for the Department of State. You will provide technical leadership, plan assessments, and ensure evidence-based determinations of control effectiveness.

You will oversee SAPs, SARs, ROEs, POA&Ms, and assessment artifacts, coordinate cross-functional teams, and communicate results to Government stakeholders.