Lead Security Control Assessor

Booz Allen Hamilton

. Direct the SCA workstream and provide independent cybersecurity assessment leadership for CDAO systems and environments .

Posted 9/23/2026full-timeUnited StatesSenior💰 $99,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cybersecurity assessment leadership, particularly within DoD RMF and NIST frameworks, while effectively managing stakeholder relationships and ensuring quality standards in security control assessments. Proficient in technical writing and risk communication, with a strong focus on evaluating complex architectures and leading cybersecurity testing events.

Highest-signal resume keywords

Cybersecurity Assessment LeadershipDoD RMF ExperienceEMASS AdministrationTechnical WritingTS/SCI Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecuritySecurity AssessmentRisk AssessmentSecurity EngineeringWindows AdministrationLinux AdministrationAWS CloudContainerizationAutomated Security ScanningNIST SP 800-53

Soft Skills

Team LeadershipStakeholder ManagementFacilitationQuality AssuranceMentoring

Tools & Technologies

EMASSSTIGSCAPACASPOA&M

Certifications & Qualifications

Bachelor's Degree in Engineering or Cyber FieldTS/SCI Clearance

Industry Keywords

Authorization PackagesSecurity Control Assessment MethodologyVulnerability ManagementCompensating ControlsInherited Controls

Tech Stack

Tools & technologies

AWSCloudCyber SecurityLinuxTypeScript

About the role

Key responsibilities & impact

Direct the SCA workstream and provide independent cybersecurity assessment leadership for CDAO systems and environments
Own assessment strategy, quality standards, stakeholder coordination, risk adjudication, and final SAP/SAR review
Advise technical leadership and AO stakeholders on control effectiveness, authorization readiness, and residual cybersecurity risk
Develop and govern assessment approach, schedules, evidence standards, test procedures, and quality-control framework
Administer eMASS and analyze STIG, SCAP, ACAS, POA&M, architecture, control, and technical evidence findings
Lead independent security control assessments under DoD RMF, NIST guidance, DoD policy, and organizational procedures
Brief findings and risk recommendations to ISSM, AO representatives, and AO-level stakeholders
Develop, review, approve, and input RMF Body of Evidence documentation into eMASS or approved SharePoint sites
Coordinate with system owners, ISSMs, ISSOs, engineers, administrators, developers, program leadership, control providers, and AO representatives
Review system boundaries, data flows, interfaces, interconnections, inherited controls, dependencies, and significant changes
Oversee assessments for ATO, reauthorization, annual assessment, significant-change assessment, and continuous monitoring
Brief assessment status, systemic risks, unresolved findings, remediation priorities, and authorization recommendations
Mentor assessors and ensure independence and objectivity across the assessment lifecycle
Maintain strong stakeholder relationships across the organization

Requirements

What you’ll need

8+ years of experience with cybersecurity, including DoD or federal RMF, security assessment, security engineering, or authorization
Experience with eMASS, STIG, SCAP, ACAS findings, POA&Ms, architecture, inherited controls, compensating controls, and technical evidence
Experience leading security control assessments and producing or approving SSPs, SAPs, SARs, POA&Ms, risk assessments, and authorization packages
Experience administering Windows, Linux, AWS Cloud, and containerization systems and software configuration
Technical writing, facilitation, quality-assurance, team leadership, and stakeholder-management capabilities
Knowledge of NIST SP 800-53, NIST SP 800-37, DoD RMF, STIGs, vulnerability management, and security-control assessment methodology
Ability to evaluate complex cloud, hybrid, containerized-data, and AI-enabled architectures and communicate risks at AO and executive levels
Ability to lead and complete cybersecurity testing events using automated security scanning tools and manual STIGs and SRGs
TS/SCI clearance required
Bachelor's degree in an Engineering or Cyber field

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program for exceptional performance and demonstration of company values
Identity verification process using advanced biometrics and artificial intelligence
Camera-on expectation during interviews, assessments, and virtual meetings