Senior Security Control Assessor (Active Secret)

Big Impact Tech (BIT)

Maryland

On-site

USD 120,000 - 180,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Big Impact Tech is seeking a Senior Security Control Assessor to lead independent security control assessments and prepare ATO packages for government clients. The role emphasizes tailoring assessments across cloud, OT, legacy, and AI environments and coordinating with system owners and ISSOs.

Required are a BA/BS in a cybersecurity-related field and at least 8 years of cybersecurity experience, including 5 years in assessments, with strong RMF and NIST knowledge and proven SAP/SAR/POA&M writing

Qualifications

BA/BS degree in Cybersecurity, Information Technology, or a related discipline.
Minimum 8 years of cybersecurity experience, including 5 years performing security control assessments.
Demonstrated experience with CSAM or JCAM.
Demonstrated knowledge of NIST SP 800-37 (RMF), NIST SP 800-53 Rev. 5, and NIST SP 800-53A assessment procedures.
Demonstrated experience writing SAPs, SARs, POA&Ms, and complete ATO packages.
Demonstrated ability to communicate assessment results to senior government stakeholders.

Responsibilities

Conducts independent security control assessments in CSAM/JCAM.
Develops Security Assessment Plans (SAPs) and Security Assessment Reports (SARs).
Builds and maintains POA&M matrices.
Prepares ATO, ATP, ATU, and conditional ATO packages.
Produces Risk Assessment Memos (RAMs).
Uploads and manages assessment evidence.
Leads system kickoff meetings with system owners and ISSOs.
Performs technology-tailored assessments for cloud, OT, legacy, and AI systems.
Other duties as assigned.