Senior Security Controls Assessor – RMF/NIST Expert

UltraViolet Cyber; Bluemont (VA); On-site; USD 110,000 - 125,000; Full time

Benefits offered by this job

401(k) with employer match

Medical, Dental, and Vision Insurance

DTO program

11 Paid Holidays

Job summary

UltraViolet Cyber is seeking a Senior Security Control Assessor (SCA) to independently evaluate security controls and ensure effective management, operational, and technical safeguards.

You will lead cybersecurity compliance assessments, identify control gaps, and recommend risk-mitigation strategies to support enterprise system authorization. A US citizen with 7+ years in security/compliance is required.

Qualifications

• US Citizenship is required.
• Bachelor’s degree in cybersecurity, computer science, information systems, or a related field (or 6 years of experience equivalency).
• 7+ years of hands-on cybersecurity, audit, or compliance experience with RMF and NIST 800-series.
• Deep understanding of NIST SP 800-53, SP 800-53A, and FISMA.
• Certifications such as CISSP, CISA, or CAP.
• Federal background investigation required; DHS suitability preferred.

Responsibilities

• Plan and execute comprehensive security control assessments per RMF and FISMA.
• Review system configurations, evaluate evidence, and perform technical testing (e.g., vulnerability scans).
• Compile assessment results into SARs and determine risk for Authorizing Officials.
• Identify control weaknesses and support creation of POA&Ms.
• Guide junior assessors and coordinate with ISSOs, system owners, and stakeholders.

Skills

RMF knowledge

NIST SP 800-53

Vulnerability testing

Security assessments leadership

Education

Bachelor’s degree in cybersecurity, computer science, information systems, or related field

6 years of experience equivalency

Tools

Vulnerability Scanning Tools

SAR reporting tools

Job description

UltraViolet Cyber is seeking a Senior Security Control Assessor (SCA) to independently evaluate security controls and ensure effective management, operational, and technical safeguards.

You will lead cybersecurity compliance assessments, identify control gaps, and recommend risk-mitigation strategies to support enterprise system authorization. A US citizen with 7+ years in security/compliance is required.