Security Controls Assessor / OSCAL at TestPros | Torre

Security Controls Assessor / OSCAL

You will secure critical systems by assessing compliance with NIST and OSCAL for government and commercial clients.
Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Freelance
Recurrent
Compensation
USD50 - 85/hour
location_on
Remote (for United States residents)
Shared by
Emma of Torre.ai
about 9 hours ago

Requirements and responsibilities


TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.Start: Future projects late 2026 or 2027 (not an immediate job opening)Type: Part-time consultingOverviewThe ideal candidate will have strong hands-on experience conducting independent security control compliance assessments using guidelines from NIST (800-53, 800-171) and assessment automation via OSCAL (Open Security Controls Assessment Language). You must have security controls and OSCAL experience in both U.S. Government and Commercial environments. FedRAMP experience is a plus...Required QualificationsProven OSCAL experience (at least two years).5+ years of hands-on security controls assessment and development of Security Assessment Plan (SAP), Security Assessment Report (SAR) and Plan of Actions and Milestones (POA&M).Experience with RegScale, Paramify, or similar tools.Experience with government, public sector, or municipal IT environments is highly preferred.Ability to write clear, professional, and actionable technical reports.Full U.S. Citizenship, and ability to pass an extensive background check.Preferred SkillsExperience with NIST 800-53 based ATO assessment, NIST 800-171/CMMC assessment, and/or HIPAA assessment.Ability to produce a set of interoperable, extensible, machine-readable formats that supports a broad range of control-based risk management processes (XML-, JSON-, and YAML-based formats that allow for lossless translations between XML, JSON, and YAML representations).Familiarity with U.S. Government security policy requirements.Experience coordinating with multi-agency or cross-organizational IT teams.Expertise with common tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus/Tenable, and Wireshark.Engagement DetailsEstimated Start: Late 2026 or 2027Estimated Duration: TBDWork Location: Fully RemoteClearances: Not required, but government experience is a plusRate: $50-85/hr (1099 or Corp. to Corp.) This range represents a good-faith estimate and is not a guarantee; final compensation is determined by factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range.Offer ConsiderationsTestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications.Federal ComplianceAs a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.BenefitsTestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees.
Optionally, you can add more information later (benefits, pre-screening questions, etc.)
check_circle

Payment confirmed

A member of the Torre team will contact you shortly

In the meantime, continue adding information to your job opening.