Security Control Assessor

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™


ASRC Federal is seeking a Security Control Assessor to support our customer in DC metro area. This position provides leadership supporting and implementing federal program oversight for multiple sites across the nation. Conducts security control reviews consistent with Federal requirements, NIST SP 800-53, and Risk Management Framework (RMF). Extensive experience with applying and interpreting federal security controls. Works closely with penetration testing team to evaluate the overall program risk and help sites develop remediation actions to address unmet cybersecurity controls.
Hybrid – 3-days onsite (DC Forrestal Office) /subject to client requirements
Responsibilities:
• Developing assessment plans consistent with NIST SP 800-53 Security Controls
• Reviewing and interpreting results of cybersecurity tools, e.g. Tenable, Crowdstrike.
• Must be able to mentor junior team members and contribute to the development of testing methodologies and tools.
• Understanding of FedRAMP and cloud security authorization and inherited security controls.
• Partnering to build Purple Teaming engagement with sites.
• Familiarity with architecture and common IT systems to discuss approaches to weakness remediation.

Requirements:
• Experience in vulnerability analysis and remediation. Including providing clear instructions for describing threat actors and impact of unmet security controls.
• Experience developing Authorization Packages, System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms).
• Excellent written and oral communication skills to communicate technical findings to an executive audience.
• Monitor industry trends and potential impacts to federal cybersecurity programs, e.g. AI.
• Must have a Bachelor's degree in a related field
• 10+ years of experience
• DOE Q-Clearance or TS Equivalent
Desired skills:
• PowerBI
• MS Office – MS Excel and MS Word
• Familiarity with Archer & CSA GRC Tools.


We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.