Security Control Assessor II (SCA II) (TS, w/ SCI Eligibility)

RedTrace Technologies Inc•Hanscom AFB, MA

4d•$167,000 - $182,000•Onsite

About The Position

The Security Control Assessor II (SCA II) conducts comprehensive assessments of management, operational, and technical security controls used by or inherited by information systems (ISs). The assessment determines whether controls are correctly implemented, operating as intended, and achieving the desired security outcomes. The SCA evaluates the severity of identified weaknesses and deficiencies and recommends corrective actions. Work covers Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities within the customer's area of responsibility. The position is located at Hanscom AFB, Massachusetts, and requires U.S. citizenship, a Top Secret clearance with SCI eligibility, eligibility for access to SAP information, and willingness to submit to a counterintelligence polygraph.

Requirements

7–9 years of related experience.
Bachelor’s degree in a related discipline or equivalent experience (4 years).
At least four years of experience in SAP, SCI, or Collateral Information Systems (IS) security and implementing the regulations identified in the duties.
Prior performance in the role of ISSO, ISSM, or SCA.
Meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Manager Level II.
Must be able to regularly lift 50 pounds.
U.S. citizenship required.
Top Secret clearance with SCI eligibility required.
Eligibility for access to Special Access Program information.
Willingness to submit to a counterintelligence polygraph.

Responsibilities

Oversee the development, implementation, and evaluation of IS security program policy, with special emphasis on integration of existing SAP network infrastructure.
Assess information systems using the Risk Management Framework (RMF) methodology and in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG).
Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and Delegated and/or Authorizing Official (DAO/AO) on assessment and authorization issues.
Evaluate authorization packages and recommend authorization decisions to the AO and/or DAO.
Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required.
Advise the Government on information-system impact levels for confidentiality, integrity, and availability.
Ensure security assessments are completed and documented, and prepare the Security Assessment Report (SAR) for the authorization boundary.
Initiate a Plan of Action and Milestones (POA&M) identifying weaknesses for each assessed authorization boundary, based on SAR findings and recommendations.
Evaluate security assessment documentation and provide written recommendations for security authorization to the Government.
Discuss authorization recommendations and submit the security authorization package to the AO/DAO.
Assess proposed changes to authorization boundaries, operating environments, and mission needs to determine whether operations may continue.
Review and concur with sanitization and clearing procedures in accordance with Government guidance and policy.
Assist the Government with compliance inspections and cybersecurity-related security incidents, ensuring proper corrective measures are taken.
Ensure the organization addresses and conducts all phases of the system development life cycle (SDLC).
Evaluate hardware and software to determine their security impact on authorization boundaries.
Evaluate the effectiveness and implementation of Continuous Monitoring Plans.
Represent the customer on inspection teams.