Security Control Assessor

San Diego, CA (100% Onsite)

W2 Long-term contract (4.5 years left on award)

M-F core hours

This position supports highly sensitive classified environments and mission systems. The role is focused on security control assessments and the independent evaluation of system security posture. As an assessor, you will be responsible for evaluating security controls, identifying gaps, and validating compliance with established requirements across both Information Technology (IT) and Operational Technology (OT) environments.

• Conduct security control assessments and independent evaluations of system security posture.
• Review security implementations across on-premises, cloud, hybrid, virtualized, AI/ML, robotic process automation, and cross-domain solutions.
• Provide cybersecurity oversight on complex, enterprise-scale systems and architectures.
• Evaluate security controls, identify gaps, and validate compliance with Risk Management Framework (RMF) requirements.
• Communicate findings and security impacts to senior stakeholders and government leadership.
• Operate as an assessor and inspector rather than a system owner or manager.
• Support security authorization activities and compliance efforts.
• Maintain a professional bearing and clear communication in high-pressure situations.

• 20+ years of relevant experience.
• Clearance:
  Must be able to obtain and/or maintain a Department of Defense TS/SCI security clearance as a condition and continuation of employment*
• Deep understanding of NIST 800-53 security controls and RMF authorization processes.
• Strong knowledge of security requirements, organizational structure, and governance within a government context.
• Experience conducting security control assessments and evaluating control effectiveness.
• Ability to assess complex technical implementations across diverse systems and technologies, including IT and OT environments.
• Strong written and verbal communication skills, with experience presenting assessment findings and risk impacts.

• Experience as a Security Controls Assessor (SCA); ISSM/ISSO backgrounds are acceptable if an assessment-focused mindset can be demonstrated.
• Experience conducting security control assessments of operational systems.
• Knowledge of the Joint Special Access Program Implementation Guide (JSIG) is preferred.
• Ability to work independently while maintaining strong communication with clients and team members.
• Possession of CISSP, CASP+, or other advanced cybersecurity certifications.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including Clearly Rateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

Everforth Apex Benefits Overview:
Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a Support Linc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and…