Assessment Lead

Avint is seeking a highly motivated Assessment Lead in support of a critical government contract. The Assessment Lead is a Security Controls Assessor (SCA) responsible for overseeing a team of cybersecurity professionals dedicated to assessing, testing, and validating the effectiveness of information security controls across organizational systems. This role combines technical expertise in security assessment frameworks with leadership responsibilities, ensuring that all IT systems, applications, and infrastructures comply with relevant regulatory requirements, organizational policies, and industry best practices.

The Assessment Lead guides the execution of Security Assessment and Authorization (A&A) processes, manages workload distribution, and acts as a primary liaison between the assessment team and system stakeholders. Additionally, as a seasoned professional, the Assessment Lead will serve as an Avint career manager and guide the professional advancement of junior team members.

• Serve as the primary contractor lead and subject matter expert for Security Control Assessment activities.
• Provide technical direction and oversight to Security Control Assessors and other contractor personnel supporting assessment activities.
• Ensure assessors appropriately apply examination, interview, and testing procedures and that assessment conclusions are supported by sufficient and appropriate objective evidence.
• Maintain assessment independence and ensure assessment personnel do not assess controls for which they were directly responsible for implementing, except where specifically authorized by the Government.
• Oversee and facilitate the professional and educational development of junior Avint teammates.

• Plan, coordinate, and oversee the execution of Security Control Assessments across assigned information systems and environments.
• Develop and maintain assessment schedules, milestones, resource assignments, and assessment priorities in coordination with the Government.
• Lead assessment entrance meetings, status meetings, technical discussions, findings reviews, and assessment exit briefings with Government and system stakeholders.
• Coordinate assessment activities with System Owners, Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), system administrators, security engineers, technical teams, and other Government-designated stakeholders.
• Provide assessment status, metrics, risks, accomplishments and issues to the COR and other Government-designated personnel as required.

• Lead the development, review, and execution of Security Assessment Plans (SAPs), including assessment scope, control selection, assessment procedures, evidence requirements, testing methodology, and Rules of Engagement (ROE), as applicable.
• Review system security documentation, policies, procedures, technical configurations, architecture documentation, vulnerability scan results, penetration testing results, prior assessment findings, Plans of Action and Milestones (POA&Ms), and other supporting evidence necessary to determine control effectiveness.
• Evaluate the implementation and effectiveness of security and privacy controls and identify control deficiencies, vulnerabilities, weaknesses, and associated cybersecurity risks.
• Ensure assessment findings clearly document the condition identified, supporting evidence, applicable control or requirement, risk, and assessment determination.
• Support validation and retesting activities to determine whether identified deficiencies have been successfully remediated.

• Perform quality assurance reviews of assessment work products to ensure findings are technically accurate, consistent, adequately supported, and compliant with Government assessment standards.
• Review and approve contractor-developed assessment documentation prior to submission to the Government.
• Lead the preparation and delivery of Security Assessment Reports (SARs), assessment findings, risk summaries, executive-level briefings, and other required assessment deliverables.
• Track assessment findings and deliverables through closure and ensure assessment records and supporting evidence are maintained in Government-designated repositories and cybersecurity tools.

• Ensure assessment activities are performed in accordance with…