ZipRecruiter

Log In

1

Security Control Assessor Jobs in Reston, VA (NOW HIRING)

TSA, Inc.

Senior Security Control Assessor

Arlington, VA

$130K - $150K/yr

Senior Security Control Assessor Overview: TSA is currently seeking a Senior Security Control Assessor who will serve as a Functional Lead and provide support to our NAVAIR customer in the DC Metro ...

Peraton

Security Control Assessor

Alexandria, VA · On-site

$146K - $234K/yr

Execute a security control assessment plan and update the System Security Plan * Review vulnerability scans and remediation * Implement risk management programs by utilizing NIST, FISMA, HIPAA, and ...

System One

Junior Security Control Assessor

Bethesda, MD · On-site

$100K - $115K/yr

You'll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800 ...

System One

Junior Security Control Assessor

Bethesda, MD · Remote

$100K - $115K/yr

You'll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800 ...

System One

Junior Security Control Assessor

Bethesda, MD · Remote

$100K - $115K/yr

You'll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800 ...

System One

Junior Security Control Assessor

Bethesda, MD · Remote

$100K - $115K/yr

You'll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800 ...

System One

Junior Security Control Assessor

Bethesda, MD · Remote

$100K - $115K/yr

You'll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800 ...

Argo Cyber Systems

Security Control Assessor

Arlington, VA · On-site

$110K - $130K/yr

Security Control AssessorLocation: Arlington, VA (On-Site)Citizenship: US onlyClearance: Active TS/SCI (DHS EOD Suitability required)Company: Argo Cyber Systems, LLC - Service-Disabled Veteran-Owned ...

Cymertek

Security Control Assessor (SCA)

Chantilly, VA · On-site

Security Control Assessor (SCA) LOCATION Chantilly, VA 20151 CLEARANCE TS/SCI Full Poly (Please note this position requires full U.S. Citizenship) KEY SUMMARY We are seeking a meticulous and detail ...

previous pagenext page

Showing results 21-40

All JobsSecurity Control Assessor JobsSecurity Control Assessor Jobs in Reston, VA

Security Control Assessor information

See Reston, VA salary details

$9

$61

$81

How much do security control assessor jobs pay per hour?

As of Aug 22, 2026, the average hourly pay for security control assessor in Reston, VA is $61.14, according to ZipRecruiter salary data. Most workers in this role earn between $52.50 and $70.77 per hour, depending on experience, location, and employer.

What is a security control assessor?

Security Control Assessors (SCAs) are professionals responsible for evaluating the security controls of information systems to ensure they meet required standards and regulations. They conduct assessments, document findings, and provide recommendations to help organizations manage risk and achieve compliance with frameworks such as NIST or FISMA. SCAs play a critical role in maintaining the security and integrity of sensitive data by identifying vulnerabilities and verifying that corrective actions are implemented effectively.

What are the main challenges security control assessors face when evaluating complex information systems?

Security Control Assessors often encounter challenges such as rapidly evolving security threats, integrating new technologies, and ensuring compliance with multiple frameworks (like NIST, FISMA, or RMF). Assessing large, interconnected systems requires attention to detail and strong analytical skills to identify vulnerabilities and recommend effective controls. Collaboration with system owners, IT staff, and auditors is essential to obtain comprehensive documentation and clarify system boundaries, which can be a demanding part of the assessment process.

What are the key skills and qualifications needed to thrive as a security control assessor, and why are they important?

To thrive as a Security Control Assessor, you need expertise in information security principles, risk management frameworks like NIST RMF, and a relevant bachelor's degree or equivalent work experience. Familiarity with security assessment tools, compliance management systems, and certifications such as CISSP, CISA, or CAP is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial for evaluating security controls and reporting findings clearly. These skills ensure accurate risk assessments, regulatory compliance, and robust protection of organizational information assets.

What is the difference between Security Control Assessor vs Security Analyst?

AspectSecurity Control AssessorSecurity Analyst
CertificationsRisk Management Framework (RMF), CISSP, CISACISSP, Security+
Work EnvironmentFederal agencies, DoD, government complianceCorporate, cybersecurity teams, IT departments
ResponsibilitiesAssess security controls, ensure compliance, auditMonitor security, analyze threats, implement security measures

The Security Control Assessor primarily evaluates security controls for compliance and risk management, often within government agencies. In contrast, the Security Analyst focuses on monitoring and analyzing security threats to protect organizational assets. While both roles require cybersecurity knowledge and certifications like CISSP, their focus areas and work environments differ significantly.

How much do security control assessors make?

Security Control Assessors in the federal government or related sectors typically earn between $80,000 and $130,000 annually, depending on experience, certifications, and location. Salaries can vary based on agency, level of clearance, and specific responsibilities, with higher pay often associated with specialized skills and certifications like CISSP or CISA.

What are the most commonly searched types of Security Control Assessor jobs in Reston, VA?

The most popular types of Security Control Assessor jobs in Reston, VA are:

What are popular job titles related to Security Control Assessor jobs in Reston, VA?

For Security Control Assessor jobs in Reston, VA, the most frequently searched job titles are:

What job categories do people searching Security Control Assessor jobs in Reston, VA look for?

The top searched job categories for Security Control Assessor jobs in Reston, VA are:

What cities near Reston, VA are hiring for Security Control Assessor jobs?

Cities near Reston, VA with the most Security Control Assessor job openings:

Security Control Assessor jobs near you
Infographic showing various Security Control Assessor job openings in Reston, VA as of August 2026, with employment types broken down into 1% As Needed, 76% Full Time, 18% Part Time, 4% Contract, and 1% Nights. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $127,169 per year, or $61.1 per hour.

Junior Security Control Assessor

System One Holdings, LLC

Bethesda, MD • On-site

$100K/yr

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 29 days ago

Job description

Location: Bethesda, MD (mostly remote, occasional onsite required)
Work schedule: 40 hrs/week
Compensation: $100,000-$115,000/year
Target start: by end of August 2026
Clearance / Public Trust: Public Trust eligibility (Tier 2/3) required
About the role
We're hiring a Junior Security Control Assessor to support independent security control assessments across the system authorization lifecycle. You'll work under a senior assessor and help evaluate security control implementation, validate evidence, and document results in alignment with NIST Risk Management Framework (RMF) and NIST SP 800-53 Rev. 5, using JCAM practices.
This is a great fit for someone who enjoys cybersecurity compliance, evidence-based assessments, and strong technical writing-without being the person who authors the entire authorization package.
What you'll do
  • Support independent Security Control Assessments (SCAs) across the authorization lifecycle
  • Review and validate security authorization documentation (SSP, SAP, SAR, POA&M, contingency plans, and supporting artifacts)
  • Assess security control implementation through documentation review, interviews, and technical validation
  • Help evaluate cloud security packages and inherited controls (as applicable)
  • Document findings, recommendations, and remediation activities clearly and professionally
  • Assist with evidence validation and remediation tracking
  • Partner with system owners and ISSOs while maintaining assessor independence

Required qualifications
  • Education: Bachelor's in Cybersecurity, IT, Computer Science, Information Systems (or similar)
    • OR 4 additional years of relevant experience in lieu of a degree
  • Experience: 3-5 years supporting cybersecurity, information assurance, RMF, security assessments, compliance, or IT operations
  • Working knowledge of:
    • NIST RMF (800-37) and NIST SP 800-53 Rev. 5
    • JCAM methodology
  • Experience reviewing security documentation and assessment evidence/artifacts
  • Strong analytical skills and technical writing ability

Preferred (nice to have)
  • Experience with eMASS or similar GRC platforms
  • Familiarity with FedRAMP, cloud security concepts, C-SCRM, and related federal security frameworks
  • Experience supporting independent audits/assessments (e.g., external review organizations)

Tools/tech exposure (helpful)
  • JCAM
  • Tenable
  • CrowdStrike
  • Splunk / Splunk Enterprise
  • AWS
  • Python (plus)

Certifications (preferred, not all required)
  • ISC2 CC or CGRC
  • CompTIA Security+, CySA+, PenTest+, CASP+
  • CEH
  • Microsoft SC-900
  • System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
    System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
    #M-1
    #LI-AJ1
    Ref: #856-Baltimore-S1
System One logo

About System One

Sourced by ZipRecruiter

System One helps employers get work done more efficiently and economically without compromising quality. Over our 35+ year history, we've helped connect thousands of talented people with innovative companies. The excitement of a perfect fit motivates us every single day.

Industry

Business consulting services and recruiting and staffing services

Company size

5,001 - 10,000 Employees

Headquarters location

Pittsburgh, PA, US

View All System One Jobs

Apply