Senior Security Control Assessor

Serco; Ashland (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Serco is seeking a Senior Security Control Assessor to provide senior-level assessment support for a DoD customer within the F-35 JPO program. You will evaluate security controls, document risks, and support secure mission operations in highly secure DoD environments.

The role requires TS/SCI clearance, 10+ years of relevant experience, and on-site work in Arlington, VA. You will engage with government and contractor stakeholders, lead reports, and drive remediation tracking and status updates.

Qualifications

• Minimum 10 years of relevant cybersecurity/DoD security functions experience.
• Senior-level experience in security control assessments and RMF.
• Strong analytical and technical writing abilities.
• Experience coordinating with government and contractor stakeholders.

Responsibilities

• Provide senior-level security control assessment support, control validation, documentation review, and reporting.
• Review assessment evidence, security plans, findings, corrective action documentation, and compliance materials.
• Coordinate with government and contractor stakeholders to support assessment schedules and action tracking.
• Maintain assessment trackers, matrices, records, and leadership reporting products.
• Support meetings, briefings, and customer updates related to security controls and assessment status.
• Identify risks, documentation gaps, and process improvements for mission assurance.

Skills

Security control assessments

RMF (Risk Management Framework)

Cybersecurity

Technical writing

Stakeholder coordination

Education

Master's degree

Bachelor's degree

Job description

Position Description & Qualifications

Looking for an opportunity at a place where you can have an influence every day? Then Serco has the right opportunity for you! As a Senior Security Control Assessor, you will provide senior-level security control assessment support to a Department of Defense (DoD) customer supporting the F-35 Joint Program Office (JPO) mission. Bring your advanced assessment experience, cybersecurity knowledge, and analytical skills to help evaluate security controls, document risks, and support secure mission operations.

In this role, you will serve as a trusted advisor supporting assessment activities, compliance reviews, documentation analysis, and stakeholder coordination across complex and highly secure environments. You will work closely with government and contractor personnel to evaluate security controls, identify areas of risk, track remediation efforts, and provide reporting that supports informed decision-making and mission success.

In This Role, You Will:

• Provide senior-level support for security control assessments, control validation, documentation review, and reporting.

• Review assessment of evidence, security plans, findings, corrective action documentation, and related compliance materials.

• Coordinate with government and contractor stakeholders to support assessment schedules, data calls, issue resolution, and action tracking.

• Maintain assessment trackers, matrices, records, and leadership reporting products.

• Support meetings, technical discussions, briefings, and customer updates related to security controls and assessment status.

• Identify risks, documentation gaps, and process improvements to strengthen assessment of quality and mission assurance.

To Be Successful in This Role You Will Have:

• U.S. Citizenship.

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.

• Master's degree plus 10 years of experience; or a Bachelor's degree plus an additional 14 years of experience may be considered.

• Minimum 10 years of relevant experience related to cybersecurity, security control assessments, security engineering, Risk Management Framework (RMF), compliance, or related Department of Defense security functions.

• Senior-level experience supporting security control assessments, cybersecurity, security engineering, RMF, compliance, or related DoD security functions.

• Demonstrated Special Access Program (SAP) knowledge and experience.

• Strong analytical, technical writing, and stakeholder coordination skills.

• This position is on-site. Must be able to work in the Arlington, Virginia office Monday through Friday during normal business hours.

Desired Skills

• Security Control Assessment (SCA) experience within the Department of Defense Environments.

• Knowledge of DoD cybersecurity frameworks, security requirements, and compliance processes.

• Experience reviewing security documentation, assessment findings, corrective action plans, and validation evidence.

• Ability to develop executive-level reports, briefings,