Security Control Assessor (SCA) II
About The Position
The Security Control Assessor (SCA) conducts comprehensive assessments of management, operational, and technical security controls used by or inherited by information systems to determine whether controls are correctly implemented, operating as intended, and meeting system security requirements. The SCA represents the concerns of the Approving Official (AO) and must remain independent from the ISSO/ISSM. The role assesses the severity of weaknesses and deficiencies and recommends corrective actions. Responsibilities cover Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities within the customer’s area of responsibility. The position performs oversight of information-system security programs, assesses systems under the Risk Management Framework and Joint SAP Implementation Guide, evaluates authorization packages, security documentation, threats, vulnerabilities, system changes, hardware and software, and continuous-monitoring plans. It advises government and program stakeholders, documents assessment results, prepares Security Assessment Reports, initiates Plans of Action and Milestones, supports inspections and incident response, and reviews sanitization and clearing procedures. The position is onsite in Dayton, Ohio, has a 40-hour scheduled workweek, and requires no travel. A Top Secret/SCI clearance is required, with willingness to submit to a counterintelligence polygraph. The likely salary range is $131,070–$177,330, subject to experience, location, and contractual requirements.
Requirements
- At least 7 years of related experience.
- At least 4 years of experience in SAP, SCI, or Collateral information-systems security and implementing the regulations identified in the duties.
- Prior performance in the role of ISSO, ISSM, or SCA.
- Bachelor’s degree in a related discipline; or an associate degree in a related area plus 2 years of experience; or equivalent experience (4 years).
- IAT Level III or IAM Level II certification within 6 months of hire.
- Must currently possess a Top Secret/SCI clearance and be willing to submit to a counterintelligence polygraph; the posting also lists the ability to obtain Top Secret SCI + Polygraph.
- U.S. citizenship required.
- Must be able to regularly lift 50 pounds.
Responsibilities
- Oversee development, implementation, and evaluation of information-system security program policy, with emphasis on integrating existing SAP network infrastructure.
- Assess information systems using the Risk Management Framework in accordance with the Joint Special Access Program Implementation Guide.
- Advise the Information System Owner, Information Data Owner, Program Security Officer, and Delegated and/or Authorizing Official on assessment and authorization issues.
- Evaluate authorization packages and recommend authorization to the AO and/or DAO.
- Evaluate information-system threats and vulnerabilities to determine whether additional safeguards are required.
- Advise the Government on confidentiality, integrity, and availability impact levels for system information.
- Ensure security assessments are completed and documented, and prepare the Security Assessment Report for each authorization boundary.
- Initiate a Plan of Action and Milestones identifying weaknesses for each assessed authorization boundary, based on SAR findings and recommendations.
- Evaluate security-assessment documentation and provide written security-authorization recommendations to the Government.
- Discuss authorization recommendations and submit security authorization packages to the AO/DAO.
- Assess proposed changes to authorization-boundary operating environments and mission needs to determine whether operations may continue.
- Review and concur with sanitization and clearing procedures in accordance with government guidance and policy.
- Assist the Government with compliance inspections and cybersecurity-related security incidents, ensuring appropriate corrective measures are taken.
- Ensure the organization addresses and conducts all phases of the system development life cycle.
- Evaluate hardware and software for their potential security impact on authorization boundaries.
- Evaluate the effectiveness and implementation of Continuous Monitoring Plans.
- Represent the customer on inspection teams.
Benefits
- 401(k) with company match.
- Medical plan options, including plans with Health Savings Accounts.
- Dental and vision plan options.
- Paid education and certifications.
- Paid vacation and holidays.
- Paid time off options including sick and personal time.
- Paid parental, military, bereavement, and jury-duty leave.
- Short- and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
