Senior Security Control Assessor – RMF & DoD Expertise

Chenega Agile Real Time Solutions, LLC; Arlington (VA); On-site; USD 159,000 - 185,000; Full time

Job summary

Chenega MIOS in Arlington, VA seeks a Security Control Assessor (SCA) to support DoD information systems. You will advise on impact levels for CIA, conduct SAPs, ensure timely assessments, and drive remediation through POA&Ms.

The role requires RMF knowledge, NIST guidance, FedRAMP/AWS/Azure experience, strong documentation, and the ability to brief executives. Top Secret with SCI eligibility and a DoD IAM Level II is expected.

Qualifications

• Bachelor's degree or equivalent required.
• Associate's degree with 2+ years of relevant experience.
• High school diploma or GED with 4+ years relevant experience.
• 5+ years of relevant experience.
• DOD 8140 IAM Level II (CAP, CASP, CISM, CISSP, GSLC, CCISO) required.
• Top Secret clearance with SCI eligibility is required.

Responsibilities

• Advise the A&A Manager on impact levels for Confidentiality, Integrity, and Availability.
• Conduct a Security Assessment Plan (SAP) for each package assessment.
• Ensure security assessments are completed and submitted by target date.
• Initiate a POA&M with identified weaknesses and suspense dates.
• Evaluate SAR and provide recommendations to A&A Manager, CISO and AO.
• Assess proposed changes to IS and environment that could affect authorization.
• Serve as a cybersecurity advisor to the A&A Manager.
• Develop the monitoring strategy to conform to DoD strategies.
• Document risk levels for noncompliant controls and aggregate risk.
• Develop a continuous monitoring plan specific to the information system.
• Other duties as assigned.

Skills

RMF 800-37 & 800-137

NIST 800-series

Security documentation

Cloud security (FedRAMP AWS Azure)

POA&M management

Education

Bachelor's degree

Associate's degree +2 years

High school diploma or GED +4 years

5+ years relevant experience

Tools

Vulnerability scanners

Microsoft Office

Job description

Chenega MIOS in Arlington, VA seeks a Security Control Assessor (SCA) to support DoD information systems. You will advise on impact levels for CIA, conduct SAPs, ensure timely assessments, and drive remediation through POA&Ms.

The role requires RMF knowledge, NIST guidance, FedRAMP/AWS/Azure experience, strong documentation, and the ability to brief executives. Top Secret with SCI eligibility and a DoD IAM Level II is expected.