Security Controls Assessor

Public Trust Eligibility Required

About Aretum

Aretum is a mission-driven organization committed to delivering innovative, technology-enabled solutions to our customers across defense, civilian, and homeland security sectors. Our teams work at the intersection of strategy, technology, and transformation, helping agencies solve their most critical challenges. We believe in investing in our people and creating a culture where collaboration, inclusion, and professional growth are at the forefront.

Job Summary 

Aretum is seeking a Senior Security Controls Assessor. As a Senior Security Controls Assessor, you will be responsible for conducting comprehensive security assessments of information systems to ensure compliance with applicable security controls and regulations.

Due to the nature of our work as a federal consulting organization, employees may be expected to handle Controlled Unclassified Information (CUI) and must adhere to applicable safeguarding and compliance requirements.  

Responsibilities

• Independently perform all aspects of the security controls assessment in alignment with NIST 800-53 Revision 5
• Ensure comprehensive understanding and application of ATO documentation requirements
• Coordinate all aspects of testing with relevant stakeholders and team lead
• Develop a security assessment plan with input from stakeholders
• Conduct and lead assessment interviews and tests and manage evidence
• Provide insightful recommendations to improve security posture

Requirements

• Minimum of 3 years leading security controls assessments
• Experience performing assessments while supporting the federal government
• Proficient understanding of NIST RMF
• Expertise in NIST 800-53 Rev 5
• Understanding of the ATO process
• Strong communication and task management skills

Preferred Qualifications 

• BA/BS degree, Information Security or Related
• Certifications: CISSP, CISM, CISA, or equivalent
• CSAM/JCAM Experience

Travel Requirements

This is a remote position; however, occasional travel may be required based on project needs, client meetings, team collaboration events, or training sessions. Travel is expected to be less than 10% and will be communicated in advance whenever possible. 

EEO Statement