Security Controls Assessor

Job Description

DeMase Technical Services is a Women-Owned Small Business created by experts in the cybersecurity, energy, nuclear, and defense markets. We offer best-in-class solutions for nuclear facility licensing, permitting, startup, operations, cybersecurity, and next generation technologies. DeMase provides expert professionals in the fields of cybersecurity, next generation information technologies, nuclear engineering, nuclear technologies, and environmental management. Our cybersecurity team is an industry leader supporting the Cybersecurity Maturity Model Certification (CMMC) ecosystem. DeMase is an expert authorized CMMC C3PAO and full-service CMMC provider for readiness and certification. View our for more information.

DeMase is currently recruiting for two Security Controls Assessors to work onsite at the Y-12 site in Oak Ridge, TN. These positions involve supporting sensitive government projects and requires an active DOE Q security clearance or equivalent DoD Top Secret clearance.

Job description:

• Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37);
• Develops Baseline and Risk Assessments (BARA) for new applications/capabilities deployed to the environment;
• Supports all phases of the RMF Process to include the Prepare, Categorize, Select, and Implement tasks associated with system security plan development.