National Institute of Standards and Technology
Security Control Assessor
Apply on USAJOBSThis announcement is sourced from the official USAJOBS API. Federal Job Alerts is not affiliated with OPM, USAJOBS, or any U.S. government agency.
Summary
Selective Placement Factor: Applicants must possess a current/active IT Security Certification (e.g., CISSP, GIA, SSCP, CEH, GCIH, CISA, CGRC). A current/active copy of your certification must be provided in your application package. Specialized Experience: In addition to meeting the selective placement factor, applicants must have one year (52 weeks) of specialized experience equivalent to at least the GS-12 level (ZP-III at NIST). Specialized experience is defined as: Conducting detailed security assessments against Special Publication 800-53 Revision 5 security controls Developing security authorization documents (i.e., Systems Security Plans, Risk Assessments, Security Categorization, Privacy Impact Assessment, Test and Evaluation, and Contingency Plans) Reviewing security authorization packages Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. The qualification requirements in this vacancy announcement are based on the U.S. Office of Personnel Management (OPM) Qualification Standards Handbook. If requesting reconsideration of your qualification determination, please refer to the following site: Applicant Reconsideration
Major Duties
Working as a Security Control Assessor in the Office of Information Systems Management, IT Security and Networking Division, you will perform the following duties: Conduct Assessment & Authorization (A&A) activities on NIST systems in accordance with Federal Information Security Management (FISMA) requirements. This includes conducting security documentation reviews to ensure control implementation is described appropriately, conducting security assessments to verify control implementation against the security controls required for a given system impact level, conducting secure configuration assessments, and documenting the risks and plans of action & milestones for mitigating IT security risks identified within the system.
Required Documents
The documents required may vary based on how you're applying (i.e., as a veteran or disabled veteran, current or former Federal employee, etc.). Please review the Required Documents for this position to find out if there are any documents required with your application. Failure to submit required documents, based upon how you apply, may result in loss of consideration due to an incomplete application package. A complete application includes: 1) A resume (not to exceed two pages), 2) vacancy question responses regarding technical qualifications, and 3) submission of any required documents. Please note that if you do not provide all required information, as specified in this announcement, or if the documents submitted are illegible you may not be considered for this position (or may not receive the special consideration for which you may be eligible). Resume: All applicants must submit a resume by creating one in USAJOBS or uploading one of their choosing. Please prepare a resume no longer than 2 pages; only the first 2 pages will be considered during the review process. Ensure your font is 11 points or larger and upload your resume as a .pdf document. This helps ensure your formatting looks exactly the way you intended. Cover letters are optional. To receive any credit for relevant experience, please list the month/year and the number of hours worked for experience listed on your resume. We suggest you review the qualification requirements for this position as you may need to customize your resume to ensure that it supports the position qualifications. Please refer to the Resume Guidance on how to build an effective resume.
How to Apply
Please read the entire announcement and all the instructions before you begin an application. To apply and be considered for this position, you must complete all required questionnaires, assessments, and required documentation as specified in the How to Apply and Required Documents section. The complete application package must be submitted by 11:59 PM (ET) on the closing date of the announcement to receive consideration. The application process is as follows: Click the Apply Online button. Answer the questions presented in the application and attach all necessary supporting documentation. Click the Submit Application button prior to 11:59 PM (ET) on the announcement closing date. As part of the application process, you will be asked to respond to four narrative questions. While your responses to these questions is not required and will not be scored, we encourage you to thoughtfully address each question. You will be asked to certify that you are using your own words and did not use a consultant or artificial intelligence (AI) such as a large language model (LLM) like ChatGPT or Copilot. Once your application has been submitted, you will receive a confirmation notification by email. The Human Resources Office will evaluate your application to determine your eligibility for the position. After the evaluation is complete, you will receive another notification regarding the status of your application. To update your application, including supporting documentation: During the announcement open period, return to your USAJOBS account, find your application record, and click Edit my application. This option will no longer be available once the announcement has closed. To view the announcement status or your application status: Click on this: USAJOBS Help Center - How to see your application and job status Your application status page is where you can view your application status, USA Hire assessment completion status, and review your notifications sent by the hiring agency regarding your application. Need help applying? If you are experiencing any difficulties with the online application process (anything after you have clicked the 'Apply Online' button), please contact the Agency Contact listed on this announcement between regular business hours (8:00 a.m. - 4:00 p.m. ET). If you receive any kind of error message, please be ready to provide a screenshot or, at a minimum, the error message text and number. We will provide you with a technical support number for further assistance if necessary. If you are having trouble with USAJOBS (searching for jobs, account password/profile issues, or Resume Builder), please visit the USAJOBS USAJOBS Help Center - How to.... We regret that we are unable to support any issues with USAJOBS, as this service is not maintained by the NIST. If you are experiencing a significant hardship that hinders your ability to apply online, please contact the Agency Contact listed on this announcement prior to the vacancy closing date and during regular business hours to discuss your situation.