Security Control Assessor (SCA) Liaison

JMA Resources•Mechanicsburg, PA

4d•$120,000 - $150,000•Remote

About The Position

The Security Control Assessor (SCA) Liaison supports security control assessments and the Risk Management Framework (RMF) process by coordinating communication among assessment teams, system stakeholders, and other partners. The role helps ensure that assessment activities, security documentation, findings, and remediation efforts are clearly communicated and aligned with Department of Defense (DoD) and federal cybersecurity requirements. This position is full-time and remote. The employee must reside within a six-hour drive of Mechanicsburg, Pennsylvania, due to client requirements. Travel may be required. A typical workday is eight hours, totaling a 40-hour workweek, with some flexibility to adjust work hours in response to client needs or personal reasons. A current or obtainable DoD Secret clearance is required; obtaining a clearance requires U.S. citizenship and meeting the 13 adjudicative guidelines.

Requirements

At least 7 years of relevant experience in cybersecurity, network security, information assurance, or related areas.
Experience serving as a Security Control Assessor or in a related security assessment role, such as a Navy Qualified Validator.
Experience supporting security assessments and authorization activities within the Risk Management Framework (RMF).
Hands-on experience with security, compliance, and risk management tools such as STIG Manager, eMASS, Nessus, eMASSTer, and Splunk.
Hold CompTIA Security+ CE or an accepted substitute: CompTIA Security X, Cisco Certified Network Associate – Security (CCNA Security), Cybersecurity Analyst (CSA+), Global Industrial Cyber Security Professional (GICSP), or Systems Security Certified Practitioner (SSCP).
Strong knowledge of the RMF, including NIST SP 800-37 and NIST SP 800-53.
Knowledge of vulnerability management, Impact Analysis / Predisposing conditions, and security gap analysis.
Understanding of applicable cybersecurity laws, regulations, and standards, including NIST, FISMA, and DoD directives.
Ability to analyze security assessment results, identify root causes, and recommend risk-based mitigation strategies.
Strong written and verbal communication skills, including the ability to explain technical findings and recommendations to technical and non-technical audiences.
Ability to collaborate effectively with system owners, assessment teams, authorizing officials, and other stakeholders.
Current or ability to obtain a DoD Secret clearance; U.S. citizenship and meeting the 13 adjudicative guidelines are required to obtain a clearance.
Must reside within a six-hour drive of Mechanicsburg, Pennsylvania.

Nice To Haves

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related IT field.

Responsibilities

Facilitate communication between security control assessors, system stakeholders, and other teams so technical findings and requirements are clearly understood.
Support planning and execution of security control assessments, including coordinating assessment scope, test plans, and related activities with the SCA team lead.
Prepare, review, and maintain security documentation supporting DoD and federal cybersecurity requirements.
Analyze identified security gaps and weaknesses and support development of mitigation strategies and Plans of Action and Milestones (POA&Ms).
Support Assessment and Authorization (A&A) activities throughout the RMF lifecycle.
Help ensure applicable security policies, controls, standards, and resources are understood and applied appropriately.
Coordinate with system owners, assessment teams, authorizing officials, and other stakeholders to support assessment activities and resolution of findings.
Perform other related duties as assigned to support evolving company and client needs.