SME Security Control Assessor

Role Overview

We are looking for a SME Security Control Assessor that supports security control assessment activities for HHS-ACF information systems by applying NIST security controls and frameworks to evaluate control implementation and effectiveness. This role is responsible for gathering, organizing, and documenting assessment evidence; conducting security testing and evaluations; and assisting with vulnerability scanning and analysis.

What You Will Do

Support security control assessment activities, gather and organize assessment evidence, document security control implementation, conduct security testing and evaluations, assist with vulnerability scans and analysis, create assessment reports and briefings, maintain assessment documentation and tracking sheets, lead security control interviews, prepare assessment deliverables, and participate in team meetings and technical discussions.

Why It Might Be a Fit

The ideal candidate will have a Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, 2+ years of experience in security control assessments, and a basic understanding of cybersecurity principles and concepts. The candidate should also have knowledge of NIST frameworks and security controls, familiarity with common security tools and technologies, and strong attention to detail.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
• 2+ years of experience in security control assessments
• Basic understanding of cybersecurity principles and concepts
• Knowledge of NIST frameworks and security controls
• Familiarity with common security tools and technologies
• Strong attention to detail
• Excellent organizational skills
• Basic technical writing abilities
• Proficiency in Microsoft Office suite
• Strong analytical and problem-solving skills
• Ability to follow detailed instructions and procedures
• Good communication skills
• Eagerness to learn and develop professional skills
• Basic understanding of networking concepts
• Ability to work effectively in a team environment
• Commitment to maintaining confidentiality and security protocols
• Familiarity with Risk Management Framework (RMF)

Benefits

• Competitive salary