Security Controls Assessor

Cherokee Federal

Senior Security Controls Assessor evaluating MARAD information systems for compliance with cybersecurity standards. Supporting ATO decisions and developing assessment documentation in the United States.

Posted 6/19/2026full-timeRemote • 🇺🇸 United StatesSeniorLeadWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Provide independent assessments of MARAD information systems in support of system authorization, reauthorization, and continuous monitoring activities.
Evaluate management, operational, and technical security controls in accordance with NIST Risk Management Framework (RMF) requirements.
Support Authority to Operate (ATO) decisions.
Develop assessment documentation and reports.
Collaborate with MARAD, DOT, and cybersecurity stakeholders to ensure compliance, risk visibility, and mission assurance.
Assess MARAD systems in one of three states: System Authorization: Initial Authorization, Reauthorization, or Continuous Monitoring Assessment (CMA).
Provide annual assessment support to the NSMV and MARAD CIO programs.
Conduct independent assessments of specified MARAD information systems following the System Authorization process.
Execute and conduct analysis of network and systems to validate appropriate security control implementation.
Develop security assessment plans and assessment reports compliant with latest revisions of NIST Special Publication 800-53A Recommended Security Controls.
Develop security assessment executive summary documents including summative presentation further providing an overview of activities, findings, risks and mitigation recommendations.

Requirements

What you’ll need

Bachelor's Degree in Cybersecurity or related IT field may be substituted for 4 years of experience
Bachelors Degree in an IT Related Field.
Certified Information Systems Auditor (CISA), Advanced in AI Audit (AAIA), or equivalent certification
12 years of related work experience
Prior experience supporting US Navy or Coast Guard Maritime Cyber Assessments
Clearance: Must possess or be able to obtain a public Trust.
Prior Department of Transportation experience is a plus.
Must pass pre-employment qualifications of Cherokee Federal

Benefits

Comp & perks

Medical
Dental
Vision
401K
Other possible benefits as provided. Benefits are subject to change with or without notice.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

NIST Risk Management Frameworksecurity controlssecurity assessment plansnetwork analysissystem authorizationcontinuous monitoringsecurity assessment documentationrisk visibilitycybersecurity assessmentssecurity control implementation

Soft Skills

collaborationindependent assessmentcommunicationreport writingrisk mitigation

Certifications

Certified Information Systems Auditor (CISA)Advanced in AI Audit (AAIA)