TS/SCI Security Control Assessor

Insight Global; Denver (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

Insight Global is seeking a Security Control Assessor to support a federal customer in Denver, CO. This role conducts independent assessments of security controls within information systems to ensure RMF compliance and cybersecurity readiness.

You will work with cybersecurity, systems engineering, and program leadership to evaluate posture and risks. The ideal candidate has experience with ATO efforts, accreditation documentation, and risk management, using RMF tools such as eMASS or XACTA, and

Qualifications

• Requires TS/SCI clearance and IAM Level II or equivalent.
• Extensive RMF experience across all phases.
• Experience supporting ATO processes and risk assessments.
• Ability to develop and maintain POA&Ms and accreditation packages.
• Proficient with RMF tools (eMASS, XACTA) and STIGs.

Responsibilities

• Conduct independent assessments of security controls per RMF and NIST SP 800-37.
• Review accreditation packages supporting ATO efforts.
• Plan and execute security authorization reviews for systems and networks.
• Identify security gaps and provide remediation recommendations.
• Perform technical risk assessments and mitigation planning.
• Contribute to cybersecurity metrics, POA&Ms, and continuous monitoring.
• Validate implementation of controls and deviations from configurations.
• Engage in risk governance and recommend mitigations.
• Develop and maintain RMF documentation across system lifecycle.
• Assess cloud environments and external services for compliance.
• Collaborate with engineering teams to assess new systems impact on security.
• Provide recommendations to support accreditation decisions and authorization activities.

Skills

TS/SCI Clearance

IAM Level II cert

RMF knowledge

ATO process support

POA&M development

Security control assessment

Strong communication

Tools

eMASS

XACTA

RMF management tools

Job description

Insight Global is seeking a Security Control Assessor (SCA) to support a federal customer in Denver, CO. This individual will be responsible for conducting independent assessments of management, operational, and technical security controls within information systems and networks to ensure compliance with Risk Management Framework (RMF) requirements and overall cybersecurity readiness.

The ideal candidate will have extensive experience supporting Authorization to Operate (ATO) efforts, performing security assessments, developing accreditation documentation, and advising stakeholders on cybersecurity risk management. This position will work closely with cybersecurity, systems engineering, and program leadership teams to evaluate security posture, identify risks, and ensure compliance with federal security standards.

Responsibilities

• Conduct independent assessments of security controls in accordance with NIST SP 800-37 and the Risk Management Framework (RMF).
• Review and validate accreditation and authorization packages supporting ATO efforts.
• Plan and execute security authorization reviews for new and existing systems and networks. Evaluate security documentation, assessment results, and risk determinations to ensure acceptable risk levels.
• Identify security gaps and provide recommendations to improve system security posture.
• Perform technical risk assessments and develop mitigation strategies.
• Support the development and maintenance of cybersecurity metrics, POA&Ms, and continuous monitoring activities.
• Review and validate implementation of security controls and document any deviations from approved configurations.
• Participate in risk governance activities and provide recommendations regarding cybersecurity risks and associated mitigations.
• Develop and maintain RMF documentation throughout the system lifecycle.
• Support vulnerability management activities and validate remediation plans.
• Assess cloud environments, external services, and supporting infrastructure for compliance with security requirements.
• Collaborate with technical teams to evaluate how new systems, interfaces, and technologies impact overall security posture.
• Provide recommendations to support accreditation decisions and authorization activities.

REQUIRED SKILLS AND EXPERIENCE

• TS/SCI Clearance
• IAM Level II or IAT Level II certification (Security+, CAP, CASP+, CISSP, or equivalent).
• Hands-on experience supporting all phases of the Risk Management Framework (RMF).
• Strong experience managing and supporting Authorization to Operate (ATO) processes.
• Experience developing, tracking, and maintaining POA&Ms.
• Experience performing technical risk assessments and accreditation support activities.
• Experience with RMF Continuous Monitoring (ConMon) programs.
• Experience using eMASS, XACTA, or similar RMF management tools.
• Experience utilizing DISA STIG Viewer and applying STIG requirements.
• Strong written and verbal communication skills.