Jobs · Information Technology · Tennessee

Security Control Assessor

Edgewater Federal Solutions, Inc. · Oak Ridge, TN · 1 mo ago
Information TechnologyFull-time

About the role

Edgewater Federal Solutions is seeking a Security Control Assessor to join our team in Oak Ridge, TN.

Responsibilities

  • Implements and maintains security controls aligned with approved baselines and organizational requirements.
  • Supports system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
  • Monitors system security posture and identifies risks, vulnerabilities, and compliance gaps.
  • Tracks and manages POA&Ms and coordinates remediation activities with system stakeholders.
  • Assesses the security impact of system changes and supports configuration and change management processes.
  • Supports continuous monitoring activities, including vulnerability management and security reporting.
  • Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
  • Prepares systems for security assessments, audits, and Authorizing Official reviews.

Qualifications

  • Associate's degree and 5-10 years of relevant experience; OR equivalent combination of education and relevant experience.
  • U.S. Citizenship is required per contract.
  • Firm understanding of NIST SP 800-37 and NIST SP 800-53.
  • CNSSI 1253 experience a plus.
  • General understanding of cyber requirements and knowledge of cyber controls.
  • Ability to interpret cyber security plans for vendors to determine compliance with NIST requirements.
  • Ability to communicate with vendor IT and Cyber staff.
  • Desired: CMMC Professional Certification (CCP).
  • Desired: CMMC Assessor Certification (CCA).
  • Desired: NIST security controls training.

Similar jobs

Security Control Assessor

Delphi-US, LLC - Peacemakers in the Talent WarRichmond, VA· 1 mo ago
Information Technology$55–$65/hrapply on delphi-us.com