Security Control Assessor (SCA) Level 3
About The Position
System High requires SCAs to provide Information Security Assessment and Authorization (A&A) support throughout a program's lifecycle to both Contractor and Government systems. Duties & Responsibilities (but not limited to) Familiarity with Information Assurance (IA) concepts and possess moderate Information Security (IS) skills and knowledge Ability to review and recommend vulnerability and risk levels associated with software (SW) and hardware (HW) products Practical experience performing Information System (IS) A&A as defined in applicable Intelligence Community Directives (ICD) and guidance Practical experience developing and implementing security related directives and guidance for Information Technology (IT), Information Assurance (IA), and Information Management (IM) Practical experience utilizing risk management strategies for IT solutions Understanding of emerging technologies and their implementation within Government system and network environments Knowledge of IT concepts used in the evaluation of security performance and integrity of state-ofthe-art applications, communications systems, HW, SW, satellite control systems, and information processing systems Understanding of IT systems, SW, and networks Practical experience assessing security of cloud-based systems, including infrastructure as a service (IaaS), platform as a service (PaaS), and/or software as a service (SaaS) deployment Ability to effectively coordinate A&A activities of industry and Government ISs to meet acquisition milestone requirements Ability to write effective technical reports and general correspondence Ability to manage and track systems or programs involved in the A&A process Experience developing and implementing security related directives and guidance for IT, IA, and IM Experience working with a mixed skill level team to ensure that appropriate knowledge and skill transfer occurs
Requirements
- Ability to interface with clients and develop productive working relationships to meet mission objectives.
- Independent self-starter, proactive, professional, and assertive.
- Excellent organizational skills with the ability to handle multiple projects simultaneously.
- Strong communication and interpersonal skills; verbal and written.
- Demonstrate a high level of professional confidentiality.
- Available to work before/after typical office hours as requirements demand.
- Travel may be required.
- TS/SCI with CI Polygraph is required.
- Bachelor's degree + five (5) years of experience.
- Years of experience can offset education level.
- High school or GED + seven (7) years, Masters or higher + three (3) years
- Education relevant to computer engineering, INFOSEC, cybersecurity, information management, and/or computer science.
- Experience in technical project management.
- IAM Level 2 certification required.
Responsibilities
- Familiarity with Information Assurance (IA) concepts and possess moderate Information Security (IS) skills and knowledge
- Ability to review and recommend vulnerability and risk levels associated with software (SW) and hardware (HW) products
- Practical experience performing Information System (IS) A&A as defined in applicable Intelligence Community Directives (ICD) and guidance
- Practical experience developing and implementing security related directives and guidance for Information Technology (IT), Information Assurance (IA), and Information Management (IM)
- Practical experience utilizing risk management strategies for IT solutions
- Understanding of emerging technologies and their implementation within Government system and network environments
- Knowledge of IT concepts used in the evaluation of security performance and integrity of state-ofthe-art applications, communications systems, HW, SW, satellite control systems, and information processing systems
- Understanding of IT systems, SW, and networks
- Practical experience assessing security of cloud-based systems, including infrastructure as a service (IaaS), platform as a service (PaaS), and/or software as a service (SaaS) deployment
- Ability to effectively coordinate A&A activities of industry and Government ISs to meet acquisition milestone requirements
- Ability to write effective technical reports and general correspondence
- Ability to manage and track systems or programs involved in the A&A process
- Experience developing and implementing security related directives and guidance for IT, IA, and IM
- Experience working with a mixed skill level team to ensure that appropriate knowledge and skill transfer occurs
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
101-250 employees
