ZipRecruiter

Log In

2

Manager Remote Security Control Assessor Jobs (NOW HIRING)

cFocus Software Incorporated

NIH - ISSM

Bethesda, MD · On-site +1

This position is fully remote. This position requires a Public Trust or the ability to obtain a ... Coordinate with Security Control Assessors (SCAs), Authorizing Officials (AOs), System Owners ...

LMI

IT Security Lead

Support security control assessments and coordinate responses to findings * Align controls with ... Manage security incident response coordination and reporting * Maintain continuous monitoring ...

Logistics Management Institute

IT Security Lead

Support security control assessments and coordinate responses to findings * Align controls with ... Manage security incident response coordination and reporting * Maintain continuous monitoring ...

Maximus

Quality Control Manager (Remote)

VA · On-site +1

General information Job Posting Title Quality Control Manager (Remote) Date Tuesday, July 7, 2026 ... completing assessments, or participating in interviews,-please contact People Operations at ...

Glaukos

Sr. Product Security Engineer II

Burlington, MA · Remote

$124K - $170K/yr

Specify and review security control designs for authentication/authorization, secure communications ... Establish technical standards for account management, privilege management, remote access/service ...

Glaukos

Sr. Product Security Engineer II

Burlington, MA · Remote

$124K - $170K/yr

Specify and review security control designs for authentication/authorization, secure communications ... Establish technical standards for account management, privilege management, remote access/service ...

FHR

Security Architect - Consultant 9309

Miami, FL · Remote

$66.50 - $86/hr

* Location: 100% Remote. -Security Architect - Consultant 9309 . Employment Type: W2 Only (No ... control, logging and reporting systems 5+ years of experience and expertise in automation ...

FHR

Security Architect - Consultant 9309

Harrisburg, PA · Remote

$66.50 - $86/hr

* Location: 100% Remote. -Security Architect - Consultant 9309 . Employment Type: W2 Only (No ... control, logging and reporting systems 5+ years of experience and expertise in automation ...

next page

Showing results 1-20

All JobsSecurity Control Assessor JobsManager Remote Security Control Assessor Jobs

Manager Remote Security Control Assessor information

See salary details

$8

$58

$78

How much do manager remote security control assessor jobs pay per hour?

As of Jul 16, 2026, the average hourly pay for manager remote security control assessor in the United States is $58.77, according to ZipRecruiter salary data. Most workers in this role earn between $50.48 and $68.03 per hour, depending on experience, location, and employer.
What are the most commonly searched types of Remote Security Control Assessor jobs? The most popular types of Remote Security Control Assessor jobs are:
Manager Remote Security Control Assessor jobs near you
Infographic showing various Manager Remote Security Control Assessor job openings in the United States as of July 2026, with employment types broken down into 3% Locum Tenens, 26% Full Time, 2% Part Time, 1% Temporary, 1% Contract, and 67% Nights. Highlights an 89% Physical, 2% Hybrid, and 9% Remote job distribution, with an average salary of $122,236 per year, or $58.8 per hour.
NIH - ISSM

NIH - ISSM

cFocus Software Incorporated

Bethesda, MD • On-site, Remote

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

cFocus Software seeks a Information Systems Security Manager (ISSM) to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.
Qualifications:
  • Public Trust Clearance
  • B.S. Computer Science, Information Technology, or a related field
  • 7+ years of progressively responsible experience supporting Federal cybersecurity programs.
  • 5+ years serving as an ISSM, Senior ISSO, Security Manager, or equivalent cybersecurity leadership role.
  • Demonstrated experience managing multiple federal information systems through the RMF lifecycle.
  • Experience supporting FISMA High, Moderate, or Low systems.
  • Active CISSP, CISM, CAP, GSLC, or Security+

Duties:
  • Lead enterprise implementation of the NIST Risk Management Framework (RMF) across NIH/OD information systems.
  • Manage the complete Assessment & Authorization (A&A) lifecycle for Low and Moderate FISMA systems.
  • Direct the development, review, and approval of System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Security Control Traceability Matrices, and authorization packages.
  • Oversee continuous monitoring activities to ensure ongoing security authorization.
  • Supervise and mentor Information System Security Officers (ISSOs) supporting NIH/OD systems.
  • Provide cybersecurity guidance to System Owners regarding implementation of NIST SP 800-53 Rev. 5 security controls.
  • Manage enterprise cybersecurity risk assessments and recommend appropriate risk mitigation strategies.
  • Oversee Risk Mitigation Waiver documentation, approvals, compensating controls, and periodic reassessment of residual risk.
  • Coordinate with Security Control Assessors (SCAs), Authorizing Officials (AOs), System Owners, Privacy Officials, and executive leadership throughout the authorization process.
  • Ensure compliance with FISMA, HHS, NIH, NIST, OMB, and Federal cybersecurity requirements.
  • Review security architectures and proposed system changes for compliance with security requirements.
  • Direct enterprise POA&M management activities, remediation tracking, and corrective action reporting.
  • Review security assessment findings and validate remediation activities.
  • Develop executive-level cybersecurity metrics, dashboards, and risk briefings.
  • Support audit activities conducted by internal and external oversight organizations.
  • Coordinate continuous monitoring strategies, vulnerability remediation activities, and compliance reporting.
  • Provide technical leadership regarding Cybersecurity Supply Chain Risk Management (C-SCRM), common controls, and enterprise security governance.
  • Review security exceptions and risk acceptance packages for executive approval.
  • Ensure all RMF documentation remains current throughout the system lifecycle.
  • Support strategic cybersecurity planning and governance initiatives.

Apply