Guidehouse
Cyber Consulting
ITSecurityControlAssessor
Neural analysis suggests this role is
optimal for Mid candidates.
“IT Security Control Assessor at Guidehouse. Skills: FISMA security control assessments, NIST SP 800-53, NIST SP 800-53A, RMF lifecycle. Conduct FISMA security control assessments in accordance with NIST SP 800-53 and NIST SP 800-53A. Support system authorization efforts across the RMF lifecycle”
What You'll Achieve.
Document assessment results, findings, and risk determinations in SARs and related ATO artifacts; Identify control gaps, weaknesses, and POA&M items with clear, actionable remediation guidance; Ensure assessments align with agency-specific cybersecurity compliance and information security policies
Industry & Context.
Identify control gaps, weaknesses, and POA&M items with clear, actionable remediation guidance
Up to 25% Travel, Ability to Obtain Secret clearance, Must be able to OBTAIN and MAINTAIN a Federal or DoD "SECRET" security clearance, Candidates with an ACTIVE "SECRET" or higher-level clearance are preferred
What They're Looking For.
Must Have
Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field, Minimum of THREE (3) years of experience in cybersecurity, Ability to Obtain Secret clearance, Demonstrated experience performing FISMA or RMF-based security control assessments, working knowledge of FISMA, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, Experience assessing cloud-based systems, including inherited controls, Ability to clearly document technical and non-technical findings for audit-ready reporting, Understanding of federal cybersecurity compliance requirements and governance processes
Nice to Have
Master’s Degree in in computer science, Information Technology, Cybersecurity, or related field, Certified Information Systems Security Professional (CISSP), Knowledge of cloud security (FedRAMP), Experience with security tools (ACAS/Nessus, Splunk, etc.), Project management experience, ACTIVE "SECRET" or higher-level clearance
What You'll Do.
Conduct FISMA security control assessments in accordance with NIST SP 800-53 and NIST SP 800-53A
Support system authorization efforts across the RMF lifecycle
Perform control testing
and evidence reviews for management
and technical controls
Document assessment results
and risk determinations in SARs and related ATO artifacts
Identify control gaps
and POA&M items with clear
actionable remediation guidance
Support continuous monitoring activities
including ongoing control assessments and ad hoc reviews
Ensure assessments align with agency-specific cybersecurity compliance and information security policies
How You'll Work.
Team & Collaboration
Coordinate with system owners, ISSOs, engineers, and program stakeholders during assessments
Communication Scope
Ability to clearly document technical and non-technical findings for audit-ready reporting
Process & Methodology
Project management experience
Full Job Description
**_Job Family_ :** Cyber Consulting ** _Travel Required_ :** Up to 25% **_Clearance Required_ :** Ability to Obtain Secret ** _What You Will Do_ :** * Conduct FISMA security control assessments in accordance with NIST SP 800-53 and NIST SP 800-53A * Support system authorization efforts across the RMF lifecycle * Perform control testing, interviews, and evidence reviews for management, operational, and technical controls * Document assessment results, findings, and risk determinations in SARs and related ATO artifacts * Identify control gaps, weaknesses, and POA&M items with clear, actionable remediation guidance * Coordinate with system owners, ISSOs, engineers, and program stakeholders during assessments * Support continuous monitoring activities, including ongoing control assessments and ad hoc reviews * Ensure assessments align with agency-specific cybersecurity compliance and information security policies ** _What You Will Need_ :** * Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field * Minimum of THREE (3) years of experience in cybersecurity * Must be able to OBTAIN and MAINTAIN a Federal or DoD "SECRET" security clearance; candidates must obtain approved adjudication of clearance prior to onboarding with Guidehouse. Candidates with an ACTIVE "SECRET" or higher-level clearance are preferred. * Demonstrated experience performing FISMA or RMF-based security control assessments * Strong working knowledge of FISMA, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37 * Experience assessing cloud-based systems, including inherited controls * Ability to clearly document technical and non-technical findings for audit-ready reporting * Understanding of federal cybersecurity compliance requirements and governance processes * Relevant certifications preferred (e.g., CISSP, CISA, CAP, GSLC) **_What Would Be Nice To Have_ :** * Master’s Degree in in computer science, Information Technology, Cybersecurity, or related field * Certified
Applying for this IT Security Control Assessor role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Guidehouse?
Real rants from real employees. Read before you apply.