IT Security Control Assessor

<div class="content-intro"><div> <div>&nbsp;</div> <div>At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.&nbsp;</div> <div>&nbsp;</div> <div>Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.&nbsp;</div> <div>&nbsp;</div> <div>Join us to drive positive, lasting change that moves missions and the government forward!</div> <div>&nbsp;</div> </div></div><p>As a Risk Management Framework (RMF) Information Systems Security Engineer (ISSE)/ Information Systems Security Officer (ISSO), you will be responsible for overseeing the security posture of complex information systems, ensuring compliance with the Risk Management Framework (RMF).</p> <p><strong>Responsibilities</strong></p> <p>Your day-to-day activities will involve conducting thorough risk assessments, performing security testing, and analyzing security controls to identify and mitigate vulnerabilities.</p> <ul> <li>You will be tasked with developing and maintaining critical documentation such as System Security Plans (SSP), Plans of Action and Milestones (POA&amp;M), Security Control Traceability Matrices (SCTM), Risk Assessment Reports, Concepts of Operations (CONOPS), and Security Control Assessment Plans.</li> <li>Your role will also require you to monitor systems for security events, conduct regular audits, and provide recommendations for secure system architecture.</li> <li>To excel in this position, you should have hands-on experience with host and network access controls, incident response and handling methodologies, as well as a deep understanding of network protocols and the latest system and application security threats.</li> <li>Familiarity with tools and processes related to system monitoring, vulnerability management, and security auditing will be highly beneficial.</li> <li>Strong communication skills are essential, as you will be expected to clearly articulate security risks and recommendations to both technical and non-technical stakeholders.</li> <li>Holding one of the advanced 8140 certifications—such as CISSP, CISM, CCISO, CySA+, GSLC, GSNA, ISSEP, or CISA—is a requirement, ensuring you bring a high level of expertise and leade