Security Control Assessor

Overview

Edgewater Federal Solutions is seeking a Security Control Assessor to join our team in Oak Ridge, TN. 

Responsibilities

• Implements and maintains security controls aligned with approved baselines and organizational requirements.
• Supports system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
• Monitors system security posture and identifies risks, vulnerabilities, and compliance gaps.
• Tracks and manages POA&Ms and coordinates remediation activities with system stakeholders.
• Assesses the security impact of system changes and supports configuration and change management processes.
• Supports continuous monitoring activities, including vulnerability management and security reporting.
• Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
• Prepares systems for security assessments, audits, and Authorizing Official reviews.

Qualifications

• Associate's degree and 5-10 years of relevant experience; OR equivalent combination of education and relevant experience.
• U.S. Citizenship is required per contract.
• Firm understanding of NIST SP 800-37 and NIST SP 800-53
• CNSSI 1253 experience a plus
• General understanding of cyber requirements and knowledge of cyber controls
• Ability to interpret cyber security plans for vendors to determine compliance with NIST requirements. 
• Ability to communicate with vendor IT and Cyber staff.

Desired:

• CMMC Professional Certification (CCP)
• CMMC Assessor Certification (CCA)
• NIST security controls training

About Us: 

Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018 through 2025.

It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other statuses protected by applicable law.

Responsibilities

- Implements and maintains security controls aligned with approved baselines and organizational requirements.
- Supports system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
- Monitors system security posture and identifies risks, vulnerabilities, and compliance gaps.
- Tracks and manages POA&Ms and coordinates remediation activities with system stakeholders.
- Assesses the security impact of system changes and supports configuration and change management processes.
- Supports continuous monitoring activities, including vulnerability management and security reporting.
- Serves as a security liaison between system teams, cybersecurity operations, and governance bodies.
- Prepares systems for security assessments, audits, and Authorizing Official reviews.