Senior Security Control Assessor
$159.2k - $170k/yr
Senior
Bachelor's, Associate's
Arlington County, Arlington, VA, USA
In Person
CybersecuritySecurity Governance, Risk & Compliance
No H1B Sponsorship
US Top Secret Clearance Required
About the job
Requirements
- A bachelor's degree is required, or an associate's degree with 2+ years of relevant experience, or a high school diploma or GED equivalent with 4+ years of relevant experience.
- At least 5 years of relevant experience is required.
- A Department of Defense 8140 IAM Level II certification is required: CAP, CASP, CISM, CISSP, GSLC, or CCISO.
- A Top Secret clearance with SCI eligibility is required.
- Strong knowledge of Risk Management Framework 800-37 and continuous monitoring 800-137.
- Expert knowledge and hands-on experience with FISMA systems, NIST 800-series guidelines, FIPS, Security Assessment and Authorization requirements and processes, continuous monitoring frameworks and their tools, Plan of Action and Milestones policies, vulnerability and patch management, risk management, project management, and Microsoft Word, Excel, and PowerPoint.
- Proficiency with vulnerability and scanning tools, including interpreting the risk posture shown in assessment reports; experience with project management and tracking and Microsoft Office products.
- Experience assessing cloud-based security authorizations (FedRAMP, AWS, and Azure) and NIST control responsibilities.
- Experience with SAP/JSIG.
- Expertise documenting or reviewing security materials, including system security plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), and other documents under NIST 800 guidelines.
- Experience supporting cloud-based security authorizations (FedRAMP, AWS, and Azure).
- Experience creating Security Assessment Plans, Security Assessment Reports, and executive-level briefings.
Responsibilities
- Advise the A&A Manager concerning the impact levels for confidentiality, integrity, and availability of information on systems.
- Conduct a Security Assessment Plan for each package assessment.
- Ensure security assessments are completed for each information system and that each package is submitted on or before its target date.
- Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses and suspense dates for each information system, based on findings and recommendations from the Security Assessment Report.
- Evaluate security assessment documentation and provide written recommendations for security authorization to the A&A Manager, CISO, and Authorizing Official.
- Assess proposed changes to information systems, their operating environments, and mission needs that could affect system authorization.
- Serve as a cybersecurity technical advisor to the A&A Manager under the assessor's purview.
- Contribute to development of the monitoring strategy, ensuring the system-level continuous monitoring strategy conforms to applicable published Department of Defense enterprise-level or component-level strategies.
- Determine and document in the Security Assessment Report a risk level for every noncompliant security control in the system baseline for all information systems.
- Determine and document in the Security Assessment Report an aggregate risk level for the system and identify the key drivers for the assessment, considering threats, vulnerabilities, potential impacts, and existing and planned risk mitigation.
- Develop a continuous monitoring plan specific to the information system.
- Perform other duties as assigned.
About the company
Chenega is a government services contractor that supplies staffing and support services for defense, intelligence, and federal civilian customers, plus commercial clients. It operates across the United States, its territories, and several countries, tapping wide opportunities in government contracting. Its offerings center on staffing and mission support through various contracts, delivering qualified personnel and services to meet client needs. Unlike many industry players, Chenega is rooted in an Alaska Native village corporation, which shapes its ownership and community-focused approach while competing in a broad national market. The company’s goal is to help government and commercial customers execute their missions by providing reliable, professional personnel and services under contract.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Anchorage, Alaska
Founded
1974
Get referred to Chenega
See people who can refer or advise you
Simplify's Take
What believers are saying
- Chenega Naswik won a $6.4 million FBI Academy security contract starting May 2026.
- DHS gave Chenega Naswik a $78.6 million PSO task order in March 2026.
- DARPA extended SecuriGence with a $121.5 million modification in June 2026.
What critics are saying
- Chenega Global Protection faces Kalantari FLSA class action in Colorado since March 25, 2025.
- Chenega Security and Support Solutions filed a WARN notice for 64 Alaska employees in 2026.
- Chenega’s 8(a) edge weakens after July 2030, forcing tougher price competition across contracts.
What makes Chenega unique
- Chenega wins recurring federal security work at FBI, DHS, IRS, and Army sites in 2026.
- SecuriGence broadened Chenega MIOS into cybersecurity, software engineering, and cloud operations after 2024.
- Chenega’s Alaska Native and 8(a) structure supports fast recompetes and sole-source federal access.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Wellness Program
- Flexible Work Hours
- Professional Development Budget