Senior Security Control Assessor

Senior Security Control Assessor
Remote - Must be local to DC Metro area
Public Trust Eligible

Blu Omega is seeking a Senior Security Control Assessor to support a federal program focused on security and privacy control assessments. This role operates within a highly regulated financial environment and is responsible for conducting comprehensive assessments of IT systems' security/privacy controls in accordance with the NIST Risk Management Framework (RMF). The position requires experience supporting security control assessments, risk management, and compliance activities in a mission-driven environment.

Program Overview

Mission overview: Conduct security and privacy control assessments to ensure compliance with federal standards in a highly regulated environment.
Location: Remote (must be based in DMV area for badging and equipment pickup/support)
Clearance: Public Trust Eligible
Work Authorization: Employee must be authorized to work in the United States without sponsorship now or in the future.

Responsibilities

• Conduct independent security control assessments (NIST SP 800-37/800-53).
• Evaluate technical, operational, and management controls for effectiveness.
• Support system authorizations (ATO), including reviewing security documentation (SSPs, POA&Ms).
• Identify and document risks and compliance gaps; provide mitigation strategies.
• Analyze impacts of system or network changes on security posture.
• Participate in governance and risk review boards; advise on security implications.
• Verify proper implementation of security controls with system owners and engineering teams.
• Support vulnerability assessments, compliance audits, and configuration reviews.
• Contribute to RMF documentation lifecycle: CONOPS, security plans, test plans, and risk assessments.

Required Qualifications

• 7+ years of relevant cybersecurity experience.
• Master's degree or equivalent certifications and experience.
• Ability to obtain and maintain Public Trust clearance.
• U.S. Citizenship or Permanent Residency.
• Experience with risk assessment, threat modeling, and security control validation.
• Knowledge of RMF and NIST SP 800-53/37 standards.
• Experience with vulnerability scanning tools (e.g., Nessus, Qualys).
• Understanding of secure network and system architectures.
• Strong documentation and communication skills.
• Experience with security documentation review and development.

Preferred Qualifications

• CSAM/JCAM experience.
• Certifications such as CAP, CISSP, CISM, CISA, CEH, Security+.
• Experience managing security assessments in enterprise IT and cloud environments.
• Previous experience supporting highly regulated federal financial environments.

Compensation
Salary Range: $120,000.00 - $135,000.00
Final compensation is based on technical skills, experience, education, certifications, and clearance.

Benefits & Perks

• Medical, Dental, and Vision coverage
• 401(k) with company match (eligible after 6 months; vesting applies)
• Company-paid Life and AD&D insurance, voluntary options
• Short-term and long-term disability options
• Employee Assistance Program (EAP) with 24/7 support
• Telehealth and virtual care options
• Paid Time Off (PTO) and federal holidays
• Wellness programs, discounts, and lifestyle benefits

Company Overview
Blu Omega is a Woman-Owned Small Business (WOSB) delivering cybersecurity and technology solutions to federal agencies. Headquartered in Ashburn, VA, we support mission-critical programs across civilian and defense sectors, partnering with government agencies to provide expertise in cybersecurity operations, cloud modernization, data analytics, and enterprise IT support.

Equal Opportunity Employer
All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability.

#CJ #LI-Hybrid