Senior Security Control Assessor

Job not on LinkedIn

🔥 16 hours ago

🏛️ District of Columbia, Washington – Remote

🏛️ District of Columbia – Remote ☕ Washington – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SkyePoint Decisions, Inc.

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2009

🔒 Cybersecurity

🏛️ Government

🏢 Enterprise

Cybersecurity • Government • Enterprise

SkyePoint Decisions, Inc. is a government-focused cybersecurity and IT services company that provides cybersecurity, strategy, engineering, operations, and maintenance services to federal agencies. They enable federal agencies to deliver missions securely from any device and any location, and help link business strategy to operational reality. They hold or participate in multiple government contract vehicles (e. g. , SEWP VI, CIO-SP3 Small Business, GSA MAS, Department of Education BPA) and emphasize partnerships and capabilities in threat prediction, cybersecurity architecture & engineering, critical infrastructure & operations, and application development & maintenance. Based in Dulles, VA, they position themselves as a trusted provider for federal clients.

📋 Description

• Establish and satisfy information assurance and security requirements based on user, policy, regulatory, and resource demands • Conduct comprehensive assessments of implemented controls and control enhancements • Schedule and lead System Assessments out-briefs with stakeholders • Provide SAP, SAR, security recommendations, and system certifications • Prepare security, privacy, and supply chain assessment reports • Assess the severity of deficiencies and recommend corrective actions • Develop and execute Security Controls Test plans, including vulnerability scans and penetration testing aligned with DHS RVA standards • Produce final analysis reports, executive briefings for the CISO, AO briefing support, findings reports, and POA&M injection templates • Create or update three-year OSA test plans using NIST SP 800-53 control tests • Maintain OSA master project schedules using NIST assessment methods and approved OSA procedures • Create or update program management documentation, including rules of engagement, schedules, annual document reviews, and POA&M and accepted risk review processes • Ensure vulnerability and penetration tests are scheduled, conducted, analyzed, and presented to system owners and ISSOs • Meet with ISSOs, systems contractors, and the POAM Team to develop mitigation strategies and evidence criteria • Populate FSA vulnerability tracking tool injection templates for security deficiencies • Review and advise on Third Party Website and Applications (TPWA) • Review and analyze system artifacts supporting Authorization to Operate (ATO) requests • Submit monthly OSA reports to the CISO covering assessment activities, reviews, audits, configuration management, tests, and residual risks • Provide enterprise risk ratings, identify trends, and recommend security improvements

🎯 Requirements

• Bachelor’s degree or equivalent and at least ten (10) years related experience • Senior industry professional certification such as CISSP or equivalent required • At least five (5) years of experience as a Security Controls Assessor or similar audit findings response role • Excellent communications and interpersonal skills • Experience with security audits and compliance • Experience with IT Review Board change requests • Familiarity with government and agency policies and procedures, including FedRAMP, RMF, FISMA, FIPS-II, and NIST • U.S. Citizenship is required • Must be able to obtain a High Risk Public Trust Security Clearance • Active Secret or Top Secret security clearance preferred

🏖️ Benefits

• Certification incentive program • PTO • Floating federal holiday options • HMO insurance plans • High Deductible health plans with Health Savings Accounts (HSAs) • Flex Spending Accounts (FSAs) • Full dental plans • Vision insurance • Short-term and long-term disability insurance • Life insurance • 401(k) match • Flexible work environment • Professional development support and rewards for obtaining new certifications

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume