Security Control Assessor

Chenega Corp•Alexandria, VA

2d•Onsite

About The Position

Chenega Systems (CS) provides federal agencies empowered solutions in Cybersecurity and Data Visualization. Our Subject Matter Experts offer decades of experience working in the federal marketplace and the data visualization environment. The Security Control Assessor is responsible for supporting A&A or other IA/CND Compliance and Auditing processes and inspections for all enterprise systems and networks, ensuring validity and accuracy review of all associated documentation.

Requirements

Bachelor’s degree in computer science, Information Security, or a related field
10+ years of experience in protected information environments (i.e., SIPR, SAP, JWICS, etc.)
Professionally certified as IAM III is required
Active TS/SCI clearance
Successfully pass background and drug screening

Nice To Haves

A master’s Degree in a related field is preferred.
ISC(2) CISSP
Current knowledge of cross-domain solutions (CDS)
Current knowledge of cloud-computing technologies and security as they relate to Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS)
Knowledge of and experience with ICD 503 and the government's assessment and authorization process
Experience working within eMASS
Thorough knowledge of information security principles, practices, and technologies
Familiarity with security frameworks and regulations such as NIST, FISMA, and HIPAA.
Excellent problem-solving and critical-thinking skills
May be required to travel up to 25% of the time on an annual basis in support of Army SCI, CDS, A&A

Responsibilities

Lead and perform compliance reviews of computer security plans, perform risk assessments, and validate and perform security test evaluations and audits.
Analyze and define security requirements for information protection for enterprise systems and networks.
Assist in the development of security policies.
Analyze the sensitivity of the information and perform vulnerability and risk assessments based on defined sensitivity and information flow.
Responsible for auditing the most complex new and existing information systems applications to ensure that appropriate controls exist, that processing is efficient and accurate, and that information systems procedures are compliant with corporate standards.
Other duties as assigned