Senior Security Controls Assessor - Remote (Federal)

ResumeXrays LLC; Washington (District of Columbia); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Certification incentive program

PTO

401k matched

Health insurance

Job summary

SkyePoint Decisions is seeking a Senior Security Control Assessor to support the DoED FSA CPSS program in Washington, DC. This remote-position role requires leadership in assessing security controls, preparing reports, and coordinating with the AO and CISO.

You will drive policy-driven assurance activities, vulnerability management, and control testing aligned with NIST and DHS standards. The ideal candidate has ten or more years in security controls, CISSP or equivalent, and federal contract

Qualifications

• Experience in information assurance and security controls.
• Strong knowledge of governance, risk, and compliance practices.
• Excellent written and oral communication skills.
• Ability to work with cross-functional teams and stakeholders.

Responsibilities

• Establish and satisfy information assurance and security requirements based on policy, regulatory, and resource demands.
• Conduct comprehensive assessment of controls to determine effectiveness and proper operation.
• Lead system assessments with stakeholders and provide SAP, SAR, security recommendations, and system certifications.
• Prepare security, privacy, and supply chain assessment reports with findings and remediation actions.
• Develop and execute a SCT plan with vulnerability scans and DHS RVA-aligned testing; deliver final reports and briefs.

Skills

Security controls assessment

Security audits

NIST RMF familiarity

Education

Bachelor’s degree or equivalent

CISSP or equivalent certification

Job description

SkyePoint Decisions is seeking a Senior Security Control Assessor to support the DoED FSA CPSS program in Washington, DC. This remote-position role requires leadership in assessing security controls, preparing reports, and coordinating with the AO and CISO.

You will drive policy-driven assurance activities, vulnerability management, and control testing aligned with NIST and DHS standards. The ideal candidate has ten or more years in security controls, CISSP or equivalent, and federal contract