Security Controls Assessor / OSCAL (Part Time, Remote)

TestPros

Sterling, VARemoteContract$50–85/hrPosted 2mo agoSeen in employer's feed 5 days ago

Evaluate my fit

Most applications go out cold — see where you stand first. No sign-up to start.

Don't just apply. Show up ready.

Olive works from this exact posting — no sign-up to start.

Evaluate your fitSee where you stand — strengths, gaps, and what to fix first.Get started →Tailor your résuméRewritten against this posting, with a diff of every change.Get started →Practice the interviewA voice mock interview built from this job description.Get started →

At a glance

Compensation

$50–85/hr

Location

Sterling, VARemote

Schedule

Contract

Work Authorization

US work authorization required

Job overview

TestPros is hiring a Security Controls Assessor / OSCAL (Part Time, Remote). TestPros is seeking a Security Controls Assessor with strong hands-on experience in independent security control compliance assessments. The ideal candidate will utilize NIST guidelines (800-53, 800-171) and assessment automation via OSCAL. This role requires experience in both U.S. Government and Commercial environments, with FedRAMP experience being a plus. The position is for future projects starting late 2026 or 2027.

Successful candidates bring 2+ Years OSCAL Experience and Full U.S. Citizenship. Important skills include OSCAL, Security Controls Assessment, RegScale, Paramify, and Technical Report Writing. Preferred (not required): NIST 800-53, NIST 800-171, FedRAMP, and HIPAA Assessment.

Skills & qualifications

RequiredNice to have

Skills

OSCALNIST 800-53NIST 800-171Security Controls AssessmentRegScaleParamifyTechnical Report WritingFedRAMPHIPAA AssessmentXMLJSONYAMLU.S. Government Security Policy RequirementsCoordination With Multi-Agency IT TeamsCoordination With Cross-Organizational IT TeamsKali LinuxBurp SuiteNmapMetasploitNessus/TenableWireshark

Qualifications

OSCAL Experience5+ Years Security Controls AssessmentSecurity Assessment Plan (SAP) DevelopmentSecurity Assessment Report (SAR) DevelopmentPlan of Actions and Milestones (POA&M) DevelopmentFull U.S. CitizenshipAbility to Pass Extensive Background CheckExperience With Government IT EnvironmentsExperience With Public Sector IT EnvironmentsExperience With Municipal IT Environments

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

Paid Time Off

401(k) Match

Full job description

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.

Start: Future projects late 2026 or 2027 (not an immediate job opening)

Type: Part-time consulting

Overview

The ideal candidate will have strong hands-on experience conducting independent security control compliance assessments using guidelines from NIST (800-53, 800-171) and assessment automation via OSCAL (Open Security Controls Assessment Language). You must have security controls and OSCAL experience in both U.S. Government and Commercial environments. FedRAMP experience is a plus...

Required Qualifications

Proven OSCAL experience (at least two years).
5+ years of hands-on security controls assessment and development of Security Assessment Plan (SAP), Security Assessment Report (SAR) and Plan of Actions and Milestones (POA&M).
Experience with RegScale, Paramify, or similar tools.
Experience with government, public sector, or municipal IT environments is highly preferred.
Ability to write clear, professional, and actionable technical reports.
Full U.S. Citizenship, and ability to pass an extensive background check.

Preferred Skills

Experience with NIST 800-53 based ATO assessment, NIST 800-171/CMMC assessment, and/or HIPAA assessment.
Ability to produce a set of interoperable, extensible, machine-readable formats that supports a broad range of control-based risk management processes (XML-, JSON-, and YAML-based formats that allow for lossless translations between XML, JSON, and YAML representations).
Familiarity with U.S. Government security policy requirements.
Experience coordinating with multi-agency or cross-organizational IT teams.
Expertise with common tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus/Tenable, and Wireshark.

Engagement Details

Estimated Start: Late 2026 or 2027
Estimated Duration: TBD
Work Location: Fully Remote
Clearances: Not required, but government experience is a plus

Rate: $50-85/hr (1099 or Corp. to Corp.) This range represents a good-faith estimate and is not a guarantee; final compensation is determined by factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range.

Equal Opportunity Employer

TestPros is an equal-opportunity employer and does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit factor.

Offer Considerations

TestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications.

Federal Compliance

As a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.

Benefits

TestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees.

You've read the whole posting — now see how you match it.

Evaluate my fit