Control Assessment Analyst

Join a high-impact Governance, Risk, and Compliance team supporting security authorization and compliance efforts for federal information systems. This role is ideal for an experienced security professional who enjoys managing RMF/ATO activities, strengthening documentation, and collaborating across technical and business teams to support a strong security posture. Responsibilities

• Support the full security authorization lifecycle for information systems under NIST RMF guidance
• Prepare, update, and maintain security authorization packages, including system security plans, security assessment reports, and plans of action and milestones
• Perform continuous monitoring activities to help maintain authorization status and compliance readiness
• Assess security controls, review vulnerabilities, and document weaknesses and remediation efforts
• Develop and maintain POA&Ms, risk findings, and supporting security documentation
• Assist with annual security reviews, authorization updates, and audit-related requests
• Coordinate vulnerability scans, penetration testing activities, and review of scan results
• Support incident response efforts and assist with security event investigations as needed
• Partner with system owners, security teams, vendors, and technical stakeholders to align on security requirements
• Maintain security documentation, metrics, and reports in approved repositories

• Bachelor’s degree in Computer Science, Information Security, or a related field
• 3 to 5 years of experience in information security or cybersecurity compliance
• Experience supporting federal government systems and FISMA compliance requirements
• Hands-on experience with RMF and ATO processes
• Strong knowledge of NIST security frameworks, including 800-53, 800-37, and 800-171
• Ability to develop clear security documentation and manage compliance records
• Strong analytical skills with the ability to assess risk and track remediation efforts
• Effective communication and collaboration skills across technical and non-technical teams

Preferred Skills

• Experience with security assessment tools such as Nessus, ACAS, and SCAP
• Familiarity with cloud security and FedRAMP concepts
• Experience with compliance management platforms such as Xacta or similar tools
• Knowledge of how security controls are implemented across different platforms and environments
• Experience supporting security tool implementation or configuration

Horizontal is committed to fostering an inclusive workplace where diverse perspectives are valued and respected. We believe equity and belonging help create stronger teams, better ideas, and more meaningful outcomes for everyone.