Senior IT Security Control Assessor

Responsibilities

• Lead teams conducting FISMA security control assessments in accordance with NIST SP 800-53 and NIST SP 800-53A
• Support system authorization efforts across the RMF lifecycle
• Perform control testing, interviews, and evidence reviews for management, operational, and technical controls
• Document assessment results, findings, and risk determinations in SARs and related ATO artifacts
• Identify control gaps, weaknesses, and POA&M items with actionable remediation guidance
• Coordinate with system owners, ISSOs, engineers, and program stakeholders during assessments
• Support continuous monitoring activities, including ongoing control assessments and ad hoc reviews
• Oversee team deliverable reviews, offering real-time feedback and coaching to improve quality

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Minimum of five (5) years of experience in cybersecurity
• Ability to obtain and maintain a Federal or DoD "SECRET" security clearance
• Demonstrated experience performing FISMA or RMF-based security control assessments
• Strong working knowledge of NIST SP 800-53, 800-53A, and 800-37
• Experience assessing cloud-based systems and inherited controls
• Ability to document technical and non-technical findings for audit-ready reporting

Preferred Qualifications

• Master’s degree in a relevant technical field
• Relevant certifications such as CISSP, CISA, CAP, or GSLC
• Knowledge of cloud security and FedRAMP
• Experience with security tools like ACAS/Nessus or Splunk
• Project management experience

Benefits

• Medical, Rx, Dental, and Vision Insurance
• 401(k) Retirement Plan and Student Loan PayDown
• Parental Leave and Adoption Assistance
• Tuition Reimbursement and continuous learning opportunities
• Flexible benefits package including HSA and FSA options

About the Company

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. We drive efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets.