Senior Security Controls Assessor – Public Trust Clearance

Cherokee Federal; Almont (CO); On-site; USD 150,000 - 155,000; Full time

Job summary

Cherokee Federal seeks a Senior Security Controls Assessor to conduct RMF-based evaluations of MARAD information systems, including CMA, Initial Authorization, and on-site assessments. You will develop SAPs/SARs, review documentation, and ensure controls meet NIST requirements, collaborating with the ISSM and DOT guidelines.

The role requires a Public Trust clearance or the ability to obtain one, a related IT cybersecurity background, and experience with DOT/NIST processes.

Qualifications

• Bachelor’s degree in Cybersecurity or IT field; experience can substitute for four years.
• CISA or equivalent certification preferred.
• Strong background in security assessments and RMF/NIST guidance.

Responsibilities

• Assess MARAD systems in one of three states: Initial Authorization, Reauthorization, or CMA.
• Provide annual assessment support to the NSMV and MARAD CIO programs, including on-site evaluations.
• Conduct independent assessments following System Authorization processes per DOT guides.
• Review core documentation to support SAPs and ATO dates.
• Develop SAPs and SARs compliant with NIST SP 800-53A and SP 800-37.
• Collaborate with the ISSM and document evidence of control implementation.
• Enter assessment data into the CSAM database and present findings.

Skills

CISA

AAIA

Public Trust clearance

NIST knowledge

Education

Bachelor’s degree in Cybersecurity

Bachelor’s degree in IT field

Job description

Cherokee Federal seeks a Senior Security Controls Assessor to conduct RMF-based evaluations of MARAD information systems, including CMA, Initial Authorization, and on-site assessments. You will develop SAPs/SARs, review documentation, and ensure controls meet NIST requirements, collaborating with the ISSM and DOT guidelines.

The role requires a Public Trust clearance or the ability to obtain one, a related IT cybersecurity background, and experience with DOT/NIST processes.