Security Controls Assessor

UltraViolet Cyber is seeking to hire a Senior Security Control Assessor (SCA) to act as an independent evaluator to ensure the effectiveness of management, operational, and technical security controls. The candidate will lead cybersecurity compliance assessments, identify control gaps and vulnerabilities, and recommend risk-mitigation strategies to support enterprise system authorization.

Responsibilities

Plan and execute comprehensive security control assessments in accordance with RMF and FISMA; Review system configurations, evaluate evidence, and perform technical testing (e.g., vulnerability scanning) to validate security posture; Compile assessment results into Security Assessment Reports (SARs) and generate risk determinations for Authorizing Officials; Identify control weaknesses and support development of Plans of Action and Milestones (POA&Ms); Guide junior assessors, review deliverables, and coordinate assessment activities with ISSOs, system owners, and stakeholders

Requirements

US Citizenship is required; Bachelor's degree in cybersecurity, computer science, information systems, or a related field (or 6 years of experience equivalency); 7+ years of hands-on experience in cybersecurity, audit, or compliance, with specialized focus on RMF and NIST 800-series publications; Deep understanding of statutory guidance such as NIST SP 800-53, NIST SP 800-53A, and FISMA; Industry-recognized credentials such as CISSP, CISA, or CAP; Federal background investigation required

Nice to have

Current or prior DHS suitability

Benefits

401(k) with employer match of 100% of the first 3% contributed and 50% of the next 2%; Medical, Dental, and Vision Insurance; Group Term Life, Short-Term Disability, Long-Term Disability; Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness; Discretionary Time Off (DTO) Program; 11 Paid Holidays Annually