Security Control Assessor

SkyePoint Decisions

1h • Remote

About The Position

SkyePoint Decisions is seeking a Security Control Assessor to support a government contract. This remote, contingent position is subject to customer approval. The role provides subject matter expertise and technical guidance for the Information System Security and Authorization program, including assessments, authorization packages, continuous monitoring, audits, compliance reporting, and security and privacy documentation.

Requirements

• Must be able to obtain a High Risk/Public Trust Security Clearance.
• Bachelor’s degree or equivalent and five to ten years of related experience.
• Senior industry professional certification such as CISSP or equivalent.
• At least three years of experience in a computer security incident response role.
• At least three years of enterprise Linux and Windows administration experience.
• Experience working in a Security Operations Center.
• Experience with Active Directory and other enterprise credential stores.
• Passion for information security and incident response.
• Experience with cyber threat intelligence.
• Excellent communication and interpersonal skills.
• Critical-thinking and problem-solving skills.
• Ability to quickly learn new technologies and respond to changing requirements and environments.
• Ability to work independently and as part of a cross-functional team.
• Ability to identify tactical and strategic solutions to complex issues.
• Advanced malware analysis experience, such as reverse engineering and disassembly design.
• Must be a U.S. citizen.

Nice To Haves

• Active Secret or Top Secret security clearance.

Responsibilities

• Provide SA/OSA subject matter expertise to the Information System Security and Authorization program.
• Provide standards, policies, procedures, oversight, guidance, and technical expertise for the program.
• Review OSA program and continuous monitoring capabilities, PIAs, SSPs, and identity updates, and advise on improving assessment quality.
• Analyze Privacy Impact Assessments and provide advice based on the analysis.
• Analyze Third Party Website and Applications and provide advice based on the analysis.
• Review system artifacts for accuracy and completeness in support of authorization to operate requests.
• Review, create, or update RMF ATO packages for customer and external-partner systems before submission for approval.
• Create or review ATO packages before submission for CISO and CIO approval.
• Ensure assessment and audit reports are uploaded correctly to the FISMA Management Tool (Cyber Security Assessment and Management, or CSAM).
• Coordinate and assist with data calls and collection efforts, compiling and managing stakeholder responses for audit and compliance reporting.
• Audit closed Plans of Actions and Milestones (POA&Ms) for completeness and compliance.
• Support the ongoing security authorization process, including continuous monitoring.
• Develop documents for CISO-sponsored events and responses to questions and concerns.
• Review documents and provide feedback on the application of security and privacy requirements, including technical review boards, SSPs, risk assessments, contingency plans, and POA&M reports.
• Track security authorization and ongoing authorization renewal dates, coordinating renewal efforts with stakeholders, system owners, and ISSOs.
• Conduct lessons-learned sessions and develop best practices.

Benefits

• Certification incentive program.
• Paid time off (PTO).
• Floating federal holiday options.
• Health insurance options, including HMO and High Deductible plans with Health Savings Accounts.
• Flexible Spending Accounts.
• Dental insurance.
• Vision insurance.
• Short-term and long-term disability insurance.
• Life insurance.
• 401(k) with matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior