Security Control Assessor IV (SCA)

SYSTEM HIGH CORPORATION•El Segundo, CA

2d•$170,000 - $175,000•Onsite

About The Position

The Security Control Assessor (SCA) provides information security Assessment and Authorization (A&A) support throughout a customer program’s lifecycle for contractor and government facilities processing customer information. The role promotes information-system security awareness among directorate and office staff, ensures appropriate security resources are applied, and serves as a liaison between directorates and offices and OS&CI. The SCA reviews information systems for compliance with applicable DCID, ICD, and customer directives and guidance, and provides recommendations to the U.S. Government. The position advises government and industry partners on protecting data at all classification levels, including SCI; supports responses to A&A questions; and evaluates whether systems should be approved, disapproved, or granted waivers to process national security data. The SCA also supports the development and implementation of information assurance, information technology, and information management policies and provides input on future information-system security policy. The role supports or conducts approved site visits and assessments at industrial and government locations, prepares reports and memoranda for government review and approval, maintains government-provided databases, and prepares and records system A&A status notifications. The SCA ensures appropriate security requirements are addressed and that system owners or programs prepare the required Security Assessment Package documentation. This includes tracking and supporting preparation of the Security Assessment Report (SAR), including its assessment summary and authorization recommendation. The position also supports government responses to information-system security issues and provides A&A support for special programs and tactical-operations-related activities. Short-term travel within and outside the continental United States may be required for approved site inspections.

Requirements

Ability to simultaneously manage and track multiple large-scale systems or programs involved in the A&A process.
Experience developing and implementing security-related directives and guidance for information assurance, information technology, and information management.
In-depth technical understanding of information technology systems, software, and networks.
Effective technical report and general correspondence writing ability.
Practical experience performing information-system assessment and authorization as defined in applicable ICDs and guidance.
Practical experience developing and implementing security-related directives and guidance for information assurance, information technology, and information management.
Practical experience applying risk-management strategies to information technology solutions.
Technical understanding of emerging technologies and their implementation in government system and network environments.
Knowledge of information technology concepts used to evaluate security performance and integrity of state-of-the-art applications, communications systems, hardware, software, satellite control systems, and information-processing systems.
Ability to coordinate A&A activities for industry and government information systems to meet acquisition milestone requirements.
Strong leadership skills and ability to develop or lead a high-performing team focused on the customer’s mission.
Strong business acumen and analytical and metrics capabilities.
Ability to work in a dynamic environment and interact effectively with DOD personnel, military and civilian personnel, and industry partners.
Proficiency with MS Office Suite, including Word, Excel, PowerPoint, and Outlook.
Available to work before or after typical office hours.
Appropriate IAM III certification, such as CISSP or CISM.
Willingness to travel short term (less than 90 days).

Nice To Haves

Education relevant to computer engineering, information security, information management, or computer science.
Experience in technical project management.
Credible, savvy business professional trusted by senior management as a functional expert; proactive, assertive, and able to lead by example.
Able to engender trust and respect, take a hands-on approach, and address challenging scenarios with energy and performance focus.
Continuous learner who seeks improvement and evaluates industry thought leadership.
Independent self-starter with a strong track record of achievement.

Responsibilities

Review information systems for compliance with applicable DCID, ICD, and customer directives and guidance, and make recommendations to the U.S. Government.
Provide information-system security advice and guidance to government and industry partners for protecting data at all classification levels, including SCI.
Provide technical guidance and support for preparing responses to government A&A questions.
Evaluate and recommend approval, disapproval, or waivers for information systems processing national security data at industry or government facilities.
Support development and implementation of information assurance, information technology, and information management directives and guidance; provide input on future information-system security policy.
Support or conduct approved site visits and assessments at industrial and government locations, inspect and verify information-system reports and plans, and prepare written reports for government review and approval.
Prepare reports and memoranda, including Memoranda for the Record, Memoranda of Agreement, Authorizations to Proceed, status briefs, and technical briefs, for government review and approval.
Update and maintain government-provided databases with current information-system status and representative contact information.
Prepare, review, and record notifications and status messages indicating systems’ A&A state in a government-approved format.
Ensure applicable information-system security requirements are addressed and appropriate Security Assessment Package documentation is prepared by system owners or programs.
Track completion of the Security Assessment Report and support its preparation, including the assessment-results summary and authorization recommendation.
Review, coordinate, and respond to information-system security issues as requested by the government.
Provide A&A support for special programs and tactical-operations-related activities.
Ensure required documents are reported via the Data Accession List (CDRL A008).
Coordinate A&A activities for industry and government information systems to meet acquisition milestone requirements.
Manage and track multiple large-scale systems or programs in the A&A process and support knowledge and skill transfer across mixed-skill teams.
Travel for short-term site security inspections when approved by the COTR.