Security Control Assessor (SCA) I

General Dynamics Information Technology • Stockbridge, WI

2d • $129,813 - $156,745 • Onsite

About The Position

The Security Control Assessor (SCA) I conducts comprehensive assessments of management, operational, and technical security controls employed within or inherited by an information system (IS). The assessment determines whether controls are correctly implemented, operating as intended, and producing the desired outcomes for meeting system security requirements. The assessor evaluates the severity of identified weaknesses and deficiencies and recommends corrective actions. Work covers Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities in the customer’s area of responsibility.

The role performs oversight of IS security program policy development, implementation, and evaluation, with particular emphasis on integrating existing SAP network infrastructure. It assesses systems using the Risk Management Framework (RMF) in accordance with the Joint Special Access Program Implementation Guide (JSIG), advises relevant system and program officials on assessment and authorization matters, evaluates authorization packages, and provides recommendations to the Government and Authorizing Official or Delegated Authorizing Official.

The position also evaluates threats, vulnerabilities, proposed system and authorization-boundary changes, hardware and software impacts, continuous monitoring plans, sanitization and clearing procedures, and system development life-cycle activities. It documents assessment results, prepares Security Assessment Reports (SARs), initiates Plans of Action and Milestones (POA&Ms), supports Government inspections and cybersecurity incident response, and represents the customer on inspection teams.

This is an onsite role in West Lake, Texas, with a 40-hour scheduled workweek and 10–25% travel. The position requires an active TS/SCI clearance and willingness to submit to a CI polygraph. Candidates must be U.S. citizens and able to regularly lift 50 pounds. The stated likely salary range is $129,813–$156,745; compensation may vary based on experience, geographic location, and contractual requirements.

Requirements

• At least 5 years of related experience.
• At least 3 years of experience in SAP, SCI, or Collateral information systems security and implementation of the regulations identified in the duties.
• Prior performance in the role of ISSO and ISSM.
• Active TS/SCI clearance; must be willing to submit to a CI polygraph.
• U.S. citizenship required.
• Bachelor’s degree in a related discipline, or an associate’s degree in a related area plus 2 years of experience, or equivalent experience (4 years).
• IAT Level 3 certification (such as CISSP, CASP+ CE, CCNP Security, or CISA) or IAM Level 1 certification, to be obtained within 6 months of hire.
• Must be able to regularly lift 50 pounds.

Responsibilities

• Oversee development, implementation, and evaluation of IS security program policy, with emphasis on integrating existing SAP network infrastructure.
• Assess information systems using the RMF methodology in accordance with the JSIG.
• Advise the Information System Owner, Information Data Owner, Program Security Officer, and Delegated and/or Authorizing Official on assessment and authorization issues.
• Evaluate authorization packages and recommend authorization decisions to the Authorizing Official and/or Delegated Authorizing Official.
• Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required.
• Advise the Government on confidentiality, integrity, and availability impact levels for system information.
• Complete and document security assessments, prepare Security Assessment Reports for authorization boundaries, and initiate POA&Ms for identified weaknesses.
• Evaluate security assessment documentation and provide written recommendations for security authorization to the Government.
• Discuss authorization recommendations and submit security authorization packages to the Authorizing Official or Delegated Authorizing Official.
• Assess proposed changes to authorization boundaries, operating environments, and mission needs to determine whether operation may continue.
• Review and concur with sanitization and clearing procedures in accordance with Government guidance and policy.
• Assist the Government with compliance inspections and cybersecurity-related security incidents, ensuring corrective measures are taken.
• Ensure organizations address and conduct all phases of the system development life cycle.
• Evaluate hardware and software for potential security impacts on authorization boundaries.
• Evaluate the effectiveness and implementation of continuous monitoring plans.
• Represent the customer on inspection teams.

Benefits

• 401(k) with company match.
• Comprehensive health and wellness packages, including medical, dental, and vision plan options.
• Internal mobility team dedicated to career development.
• Professional growth opportunities, including paid education and certifications.
• Access to cutting-edge technology and learning opportunities.
• Extra paid vacation and holidays.
• Paid time off options including vacation, sick and personal time, holidays, and paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits, life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level