Security Control Assessor (SCA) - Cybersecurity

GET • Oak Ridge, TN

1d • $110,000 - $140,000 • Onsite

About The Position

This position is 100% ON-SITE. Candidates must live within 50 miles of Oak Ridge, Tennessee This position requires a current DoD Top Secret security clearance or DOE Q security clearance Global Engineering and Technology (GET) is seeking qualified applicants for Security Control Assessor (SCA) in support of the cybersecurity program at a U.S. Department of Energy national security facility. This position may also involve duties that require established knowledge of Information System Security Officer (ISSO) functions and responsibilities. This is a highly compensated, high-responsibility technical guidance position that is central to our mission's success. The SCA conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37 ). Compensation Range: $110,000 - $140,000 per year, depending on experience and qualifications

Requirements

• Security Clearance: This position requires a current DoD Top Secret or DOE Q security clearance.
• Knowledge, Skills, and Abilities: The candidate must demonstrate a firm understanding of NIST SP 800-37 and NIST SP 800-53
• Must have demonstrated experience in: Implementing and maintaining security controls aligned with approved baselines and organizational requirements.
• Supporting system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
• Monitoring system security posture and identifying risks, vulnerabilities, and compliance gaps.
• Tracking and managing POA&Ms and coordinating remediation activities with system stakeholders.
• Assessing the security impact of system changes and supporting configuration and change management processes.
• Supporting continuous monitoring activities, including vulnerability management and security reporting.
• Serving as a security liaison between system teams, cybersecurity operations, and governance bodies.
• Preparing systems for security assessments, audits, and Authorizing Official reviews.

Nice To Haves

• Although not a requirement, Operational Technology/Industrial Control System experience is highly sought after.

Responsibilities

• Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37 )

Benefits

• We provide exceptional benefits to our full-time employees (spouse/family coverage option also available at a company-subsidized rate).
• Benefits include:
• Medical plan options with United Health Care
• Dental
• AD&D
• Life
• Long-/Short term Disability with MetLife
• 401(k) match with Principal Financial
• All benefits are effective on day one of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level