Senior Security Controls Assessor

Cherokee Federal

. Assess MARAD systems in Initial Authorization, Reauthorization, or Continuous Monitoring Assessment states .

Posted 9/21/2026full-timeUnited StatesSenior💰 $150,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting comprehensive assessments of information systems, ensuring compliance with NIST standards, and developing security assessment plans and reports. Proficient in identifying noncompliance issues and recommending effective mitigation strategies within the maritime cybersecurity domain.

Highest-signal resume keywords

NIST SP 800-53A ComplianceSecurity Assessment Plan DevelopmentPublic Trust ClearanceCertified Information Systems Auditor (CISA)Maritime Cybersecurity Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information System Security AssessmentRisk Assessment Report DevelopmentNetwork and System Assessment ExecutionControl Validation and VerificationAssessment Schedule EstablishmentData Cataloging and Evidence CollectionMitigation Strategy RecommendationCompliance Documentation ReviewAssessment Data Entry into CSAMTechnical Security Control Assessment

Soft Skills

CollaborationPresentation SkillsAnalytical ThinkingCommunicationProblem-Solving

Tools & Technologies

CSAM DatabaseSAPsAssessment Reporting ToolsDocumentation Software

Certifications & Qualifications

Certified Information Systems Auditor (CISA)Advanced in AI Audit (AAIA)

Industry Keywords

MARADDOTU.S. NavyCoast GuardCybersecurityInformation SystemsAuthorization ProcessesContinuous MonitoringNoncompliance MitigationSecurity Controls

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Assess MARAD systems in Initial Authorization, Reauthorization, or Continuous Monitoring Assessment states
Provide annual assessment support to NSMV and MARAD CIO programs, including on-site evaluations at the Philadelphia shipyard and other locations
Conduct independent assessments of MARAD information systems using DOT security authorization processes
Review system documentation, privacy requirements, and data to develop assessment plans and schedules supporting ATO dates
Review and establish annual assessment schedules
Identify noncompliance and recommend mitigation strategies
Validate and verify information-system security requirements
Conduct comprehensive assessments of management, operational, and technical security controls and enhancements
Execute and analyze network and system assessments
Develop Security Assessment Plans and Security Assessment Reports compliant with NIST SP 800-53A and NIST SP 800-37
Define assessment scope, controls, methods, sampling, schedules, staff, endpoints, inventories, and control status in SAPs
Collect and catalog supporting evidence such as documents, screenshots, scanning reports, and interview notes
Develop SARs documenting findings and control implementation evidence
Develop and update qualitative Risk Assessment Reports compliant with NIST SP 800-30
Develop recommendation reports supporting POA&M development
Prepare executive summaries and presentations covering assessment activities, findings, risks, and mitigation recommendations
Enter assessment data into the CSAM database
Provide presentations, reports, evaluations, reviews, meeting minutes, and working papers as requested by the COR
Apply MARAD and DOT assessment and authorization guidance and policies
Collaborate with the designated ISSM
Perform other job-related duties as assigned

Requirements

What you’ll need

Active Public Trust clearance or ability to obtain a Public Trust clearance
Bachelor’s degree in an IT-related field
Bachelor’s degree in Cybersecurity or a related IT field may be substituted for four years of experience
Certified Information Systems Auditor (CISA), Advanced in AI Audit (AAIA), or an equivalent certification
Twelve years of related work experience
Prior experience supporting U.S. Navy or Coast Guard maritime cybersecurity assessments
Prior Department of Transportation experience is a plus
Must pass Cherokee Federal’s pre-employment qualifications

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401(k)
Other possible benefits as provided
Military-friendly employer
Veterans and active-duty military members transitioning to civilian status are encouraged to apply