Security Control Assessor (SCA) Liaison

JMA Resources • Mechanicsburg, PA

3d • Remote

About The Position

The Security Control Assessor (SCA) Liaison supports security control assessments and the Risk Management Framework (RMF) process by coordinating among assessment teams, system stakeholders, and other partners. The role helps ensure assessment activities, security documentation, findings, and remediation efforts are communicated clearly and aligned with Department of Defense (DoD) and federal cybersecurity requirements. This is a full-time remote position. Travel may be required, and candidates must reside within a six-hour drive of Mechanicsburg, Pennsylvania, due to client requirements. The typical schedule is eight hours per day and forty hours per week, with some flexibility to adjust work hours for client needs or personal reasons.

A current or obtainable DoD Secret clearance is required. Candidates must be U.S. citizens and meet the 13 adjudicative guidelines to obtain a security clearance.

JMA Resources offers competitive salary and discretionary bonuses, health benefits, flexible paid time off and holidays, professional development and continued learning, flexible hours, a 401(k) with company match, employee recognition programs, and company events. JMA Resources is an equal opportunity employer, provides reasonable accommodations during the application and hiring process, and participates in E-Verify.

Requirements

• At least 7 years of relevant experience in cybersecurity, network security, information assurance, or related areas.
• Experience serving as a Security Control Assessor or in a related security assessment role, such as a Navy Qualified Validator.
• Experience supporting security assessments and authorization activities within the Risk Management Framework (RMF).
• Hands-on experience with security, compliance, and risk management tools such as STIG Manager, eMASS, Nessus, eMASSTer, and Splunk.
• Current or ability to obtain a DoD Secret clearance; U.S. citizenship and meeting the 13 adjudicative guidelines are required to obtain a clearance.
• Hold CompTIA Security+ CE or an accepted substitute: CompTIA Security X, Cisco Certified Network Associate – Security (CCNA Security), Cybersecurity Analyst (CSA+), Global Industrial Cyber Security Professional (GICSP), or Systems Security Certified Practitioner (SSCP).
• Strong knowledge of RMF, including NIST SP 800-37 and NIST SP 800-53.
• Knowledge of vulnerability management, Impact Analysis / Predisposing conditions, and security gap analysis.
• Understanding of applicable cybersecurity laws, regulations, and standards, including NIST, FISMA, and DoD directives.
• Ability to analyze security assessment results, identify root causes, and recommend risk-based mitigation strategies.
• Strong written and verbal communication skills, including the ability to explain technical findings and recommendations to technical and non-technical audiences.
• Ability to collaborate effectively with system owners, assessment teams, authorizing officials, and other stakeholders.
• Must reside within a six-hour drive of Mechanicsburg, Pennsylvania, due to client requirements.

Nice To Haves

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related IT field.

Responsibilities

• Facilitate communication between security control assessors, system stakeholders, and other teams so technical findings and requirements are clearly understood.
• Support the planning and execution of security control assessments, coordinating assessment scope, test plans, and related activities with the SCA team lead.
• Prepare, review, and maintain security documentation supporting DoD and federal cybersecurity requirements.
• Analyze identified security gaps and weaknesses and support development of mitigation strategies and Plans of Action and Milestones (POA&Ms).
• Support Assessment and Authorization (A&A) activities throughout the RMF lifecycle.
• Help ensure applicable security policies, controls, standards, and resources are understood and appropriately applied.
• Coordinate with system owners, assessment teams, authorizing officials, and other stakeholders to support assessment activities and resolution of findings.
• Perform other related duties as assigned to support evolving company and client needs.

Benefits

• Competitive salary and discretionary bonuses.
• Comprehensive health benefits, including medical, dental, and vision insurance.
• Flexible Paid Time Off (PTO) and holidays.
• Opportunities for professional development and continued learning.
• Hybrid/remote work arrangement with flexible hours.
• 401(k) retirement plan with company match.
• Employee recognition programs and company events.
• Reasonable accommodations for persons with disabilities during the application and hiring process.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed