P

Parsons

Digital infrastructure and security solutions provider

Security Control Assessor

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeAberdeen, MD, USA$88.4k - $154.7k

About the Job

Requirements

  • An active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance is required.
  • A bachelor's degree in Computer Science or a related technical field, or equivalent experience and at least 4 years of related professional experience, is required.
  • Ability to work onsite in a Government Sensitive Compartmented Information Facility (SCIF) in Aberdeen, Maryland.
  • Demonstrated experience supporting the Risk Management Framework (RMF).
  • Strong experience developing, maintaining, and managing security authorization packages in eMASS.
  • Experience assessing or documenting National Institute of Standards and Technology (NIST) Special Publication 800-53 security controls.
  • Experience supporting Interim Authorization to Test (IATT), Authorization to Operate (ATO), renewals, continuous monitoring, and remediation activities.
  • Ability to obtain, organize, evaluate, and incorporate technical information from multiple vendors and stakeholders.
  • Familiarity with DSO pipeline development and security practices.
  • Strong analytical, documentation, communication, and organizational skills.
  • Ability to work independently and collaboratively in a mission-focused environment.

Responsibilities

  • Execute RMF activities in accordance with applicable Department of Defense, federal, and customer-specific policies and procedures.
  • Serve as a Security Control Assessor or RMF analyst supporting system authorization and continuous monitoring.
  • Develop, update, and maintain IATT and ATO packages in eMASS.
  • Collect and analyze cybersecurity and system security information from government organizations, system owners, vendors, and technical teams.
  • Review security control implementation statements, assessment evidence, plans of action and milestones, risk assessments, and related authorization documentation.
  • Validate that security controls are properly documented, implemented, assessed, and tracked.
  • Identify security deficiencies, compliance gaps, and residual risks, and assist with developing appropriate remediation plans.
  • Support preparation of authorization packages for IATTs, IATT renewals, initial ATOs, ATO renewals, and ongoing ATO maintenance.
  • Coordinate with Information System Owners, Information System Security Officers, Information System Security Managers, system administrators, engineers, vendors, and government stakeholders.
  • Track package status, assessment findings, documentation requirements, and authorization milestones.
  • Provide clear written and verbal communication regarding security posture, risk, compliance status, and recommended actions.
  • Support continuous monitoring activities, including security control updates, vulnerability information, configuration changes, and system changes.
  • Participate in technical reviews, security meetings, customer briefings, and authorization decision activities.
  • Maintain strict compliance with security requirements for work conducted in a classified environment.

Desired Qualifications

  • Experience supporting Department of Defense or Intelligence Community cybersecurity programs.
  • Experience as a Security Control Assessor, Information System Security Officer, Information System Security Manager, or RMF practitioner.
  • Familiarity with Department of Defense RMF guidance, cybersecurity policies, and authorization processes.
  • Experience leading RMF teams or managing multiple authorization packages.
  • Relevant certifications, such as Certified Information Systems Security Professional (CISSP), Certified Authorization Professional (CAP), Security+, Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), or other Department of Defense 8570/8140-compliant certifications.

About the Company

Parsons

Digital infrastructure and security solutions provider

Parsons provides digitally enabled solutions in national security, defense, and global infrastructure. Its work spans government and commercial clients, offering services in systems and software engineering, quality assurance, compliance, and security, along with large-scale infrastructure projects and advanced technology implementations. The company helps clients by delivering long-term, contract-based engagements that include AI readiness, data preparation for AI applications, and secure, reliable systems. A key differentiator is its breadth across diverse markets and its emphasis on rigorous systems engineering, QA, compliance, and security to ensure the integrity of critical operations while harnessing AI to improve efficiency and safety. Parsons’ goal is to solve complex security and infrastructure challenges through measurable, value-driven solutions and long-lasting partnerships with clients.

Company size
10,001+
Company stage
IPO
Headquarters
Chantilly, VA
Founded
1944

Recently Posted Jobs

Explore more opportunities at Parsons

See more jobs