Security Control Assessor

About the role

Location: San Diego, CA (100% Onsite). Type: W2 Long-term contract (4.5 years left on award). This position supports highly sensitive classified environments and mission systems. The role is focused on security control assessments and the independent evaluation of system security posture. As an assessor, you will be responsible for evaluating security controls, identifying gaps, and validating compliance with established requirements across both Information Technology (IT) and Operational Technology (OT) environments.

Responsibilities

• Conduct security control assessments and independent evaluations of system security posture.
• Review security implementations across on-premises, cloud, hybrid, virtualized, AI/ML, robotic process automation, and cross-domain solutions.
• Provide cybersecurity oversight on complex, enterprise-scale systems and architectures.
• Evaluate security controls, identify gaps, and validate compliance with Risk Management Framework (RMF) requirements.
• Communicate findings and security impacts to senior stakeholders and government leadership.
• Operate as an assessor and inspector rather than a system owner or manager.
• Support security authorization activities and compliance efforts.
• Maintain a professional bearing and clear communication in high-pressure situations.

Qualifications

A Doctorate degree with 20+ years of experience, a Master's degree with 22+ years of experience, a Bachelor's degree with 24+ years of experience, or 28+ years of experience with no degree in cybersecurity or information security fields. Candidates must be able to obtain and/or maintain a Department of Defense TS/SCI security clearance as a condition and continuation of employment (sponsorship unavailable). Deep understanding of NIST 800-53 security controls and RMF authorization processes. Strong knowledge of security requirements, organizational structure, and governance within a government context. Experience conducting security control assessments and evaluating control effectiveness. Ability to assess complex technical implementations across diverse systems and technologies, including IT and OT environments. Strong written and verbal communication skills, with experience presenting assessment findings and risk impacts.

Skills

• Formal experience as a Security Controls Assessor (SCA); ISSM/ISSO backgrounds are acceptable if an assessment-focused mindset can be demonstrated.
• Experience conducting security control assessments of operational systems.
• Knowledge of the Joint Special Access Program Implementation Guide (JSIG).
• Ability to work independently while maintaining strong communication with clients and team members.
• Possession of CISSP, CASP+, or other advanced cybersecurity certifications.

Pay

$95-110/hr

Schedule

M-F core day hours

Benefits

• Medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection.
• ESPP (employee stock purchase program).
• 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure.
• HSA (Health Savings Account on the HDHP plan).
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program.
• Access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure.
• Certification discounts and other perks to associations that include CompTIA and IIBA.
• Dedicated customer service team for Consultants that can address questions around benefits and other resources, as well as a certified Career Coach.
• Full list of benefits, programs, support teams and resources within the ‘Welcome Packet’, available from an Everforth Apex team member.