Security Controls Assessor – Journeyman

Avint

Journeyman Security Controls Assessor conducting security assessments for federal contracts. Focused on regulatory compliance and risk management in cybersecurity environments.

Posted 7/9/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $104,000 - $119,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Conduct security control assessments of information systems using interview, examination, and testing methods
Verify compliance with established frameworks such as NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, FISMA, and/or FedRAMP, depending on organizational requirements
Analyze system architectures, network diagrams, configuration settings, and policies to identify vulnerabilities and compliance gaps
Review vulnerability scanning results (e.g., Nessus, Qualys) and penetration testing reports to validate the implementation of technical controls
Document detailed testing results and draft sections of the Security Assessment Report (SAR), ensuring clear explanations of non-compliant findings
Present assessment findings and risk postures to Authorizing Officials (AO), system owners, and other stakeholders in clear, actionable terms
Assist system owners in the development of realistic Plans of Action and Milestones (POA&M) to remediate identified deficiencies
Collaborate with the Risk Management team to ensure assessment data accurately informs the organization’s continuous monitoring strategy
Stay current on emerging cyber threats, vulnerabilities, regulatory changes, and assessment techniques
Identify opportunities to automate assessment processes and integrate modern tooling into the assessment lifecycle
Participate in the development and refinement of enterprise information security policies, standards, and guidelines

Requirements

What you’ll need

Bachelor’s degree (BS/BA) OR equivalent professional experience
Security+ or higher
Minimum of 6-8 years of dedicated experience in cybersecurity, information assurance, or IT auditing
At least six (6) years of dedicated experience performing hands-on security controls assessments of systems of moderate complexity (C2 & C3) with capability of supporting C4 assessments
Must be a U.S. citizen (no dual citizenship)
Ability to pass a background investigation
Able to obtain and maintain DHS Suitability/Entry on Duty (EOD)
Strong attention to detail and organized documentation habits
Good analytical and troubleshooting abilities
Professional verbal and written communication skills, with an ability to collaborate effectively across technical boundaries.

Benefits

Comp & perks

competitive salaries
full health insurance
generous time off
observation of federal holidays
reimbursement for courses, exams, and tuition
investment in employee professional development

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Security Control AssessmentVulnerability AnalysisPenetration TestingRisk ManagementCompliance VerificationTechnical Control ImplementationDocumentation of Security Assessment ReportPlans of Action and Milestones (POA&M)Emerging Cyber Threats AnalysisAutomation of Assessment Processes

Soft Skills

Attention to DetailAnalytical AbilitiesTroubleshooting SkillsProfessional CommunicationCollaboration

Certifications

Security+DHS Suitability/Entry on Duty (EOD)