> Markdown version of [/jobs/ext/3803342-it-security-control-assessor](https://www.wearedevelopers.com/jobs/ext/3803342-it-security-control-assessor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Control Assessor

- **Company:** Guidehouse Inc.
- **Location:** McLean, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems Security Architecture Professional, SARS Software Products, Information Technology, Nessus, Splunk, Plan of Action and Milestones
- **Published:** October 17, 2026
- **Apply:** https://www.juju.com/job/1_guidehouse2-38228

## About the Role

**Job Family** **:** Cyber Consulting **Travel Required** **:** Up to 25% **Clearance Required** **:** Ability to Obtain Secret **What You Will Do** **:** + Conduct FISMA security control assessments in accordance with NIST SP 800-53 and NIST SP 800-53A + Support system authorization efforts across the RMF lifecycle + Perform control testing, interviews, and evidence reviews for management, operational, and technical controls + Document assessment results, findings, and risk determinations in SARs and related ATO artifacts + Identify control gaps, weaknesses, and POA&M items with clear, actionable remediation guidance + Coordinate with system owners, ISSOs, engineers, and program stakeholders during assessments + Support continuous monitoring activities, including ongoing control assessments and ad hoc reviews + Ensure assessments align with agency-specific cybersecurity compliance and information security policies **What You Will Need** **:** + Bachelor's degree in computer
science, Information Technology, Cybersecurity, or related field + Minimum of THREE (3) years of experience in cybersecurity + Must be able to OBTAIN and MAINTAIN a Federal or DoD "SECRET" security clearance; candidates must obtain approved adjudication of clearance prior to onboarding with Guidehouse.
Candidates with an ACTIVE "SECRET" or higher-level clearance are preferred. + Demonstrated experience performing FISMA or RMF-based security control assessments + Strong working knowledge of FISMA, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37 + Experience assessing cloud-based systems, including inherited controls + Ability to clearly document technical and non-technical findings for audit-ready reporting + Understanding of federal cybersecurity compliance requirements and governance processes + Relevant certifications preferred (e.g., CISSP, CISA, CAP, GSLC) **What Would Be Nice To Have** **:** + Master's Degree in in computer science, Information Technology, Cybersecurity, or related field + Certified Information Systems Security Professional (CISSP) + Knowledge of cloud security (FedRAMP) + Experience with security tools (ACAS/Nessus, Splunk, etc.) + Project management experience \#LI-DNI **What We Offer** **:** Guidehouse offers a comprehensive, total rewards package that