Security Control Assessor (Mid/Senior)

OneZero Solutions•Washington, DC

2d•Onsite

About The Position

The Security Control Assessor (SCA) is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an information system to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system).

Requirements

Mid-level: 3-5 years of experience
Senior level: 7-10 years of experience
Degree in Computer Science or related discipline from an accredited college or University required or the equivalent (7 years') combination of education, professional training or work experience.
At least one of the following certifications: Security+, CAP, CASP, GSLC, CISM, CISSP
TS/SCI Clearance

Responsibilities

Assess technical, operational, and management controls
Document findings in Security Assessment Reports (SARs)
Recommend corrective actions for identified vulnerabilities
Validate system security plans and control implementations
Evaluate Authorization packages and make authorization recommendations.
Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required.
Advise the Information System Security Officer (ISSO) concerning the impact levels for confidentiality, integrity, and availability for information on a system.
Review and approve the IS Security Control Assessment Procedures, the Security Assessment Plan (SAP), the System Security Plan (SSP), and the Security Control Traceability Matrix (SCTM).
Perform configuration management of a client central repository for authorization documentation (i.e., Body of Evidence (BOE)), which is maintained using an Assessment and Authorization (A&A) workflow software application.
Thorough knowledge of NIST 800-53 security controls and required documentation.