Security Control Assessor IV (SCA)

System High Corporation•El Segundo, CA

11h

About The Position

The Security Control Assessor (SCA) provides information security Assessment and Authorization (A&A) support throughout a customer program’s lifecycle at contractor and government facilities that process customer information. The role promotes information system security awareness, helps ensure appropriate security resources are applied, and serves as a liaison between directorates and offices and OS&CI. The SCA reviews information systems for compliance with applicable DCID, ICD, and customer directives and guidance, and provides recommendations to the USG. The role advises government and industry partners on protecting data at all classification levels, including SCI; provides technical support for A&A approval responses; and evaluates systems for approval, disapproval, or waiver recommendations. The SCA also supports development and implementation of information assurance, information technology, and information management policies and guidance. The position supports or conducts approved site visits and assessments at industrial and government locations, prepares written reports and memoranda for government review and approval, maintains government-provided databases, and prepares or records system A&A status notifications. The SCA ensures security requirements and documentation are addressed in Security Assessment Packages, tracks and supports preparation of Security Assessment Reports, and coordinates responses to information security issues. The role also provides A&A support for special programs and tactical operations-related activities. Short-term CONUS and OCONUS travel of less than 90 days may be required for approved site security inspections.

Requirements

Ability to simultaneously manage and track multiple large-scale systems or programs in the A&A process.
Experience developing and implementing security-related directives and guidance for information assurance, information technology, and information management.
In-depth technical understanding of information technology systems, software, and networks.
Effective technical report and general correspondence writing skills.
Practical experience performing information systems assessment and authorization as defined in applicable ICDs and guidance.
Practical experience developing and implementing security-related directives and guidance for information assurance, information technology, and information management.
Practical experience using risk-management strategies for information technology solutions.
Technical understanding of emerging technologies and their implementation in government system and network environments.
Knowledge of information technology concepts used to evaluate security performance and integrity of applications, communications systems, hardware, software, satellite control systems, and information-processing systems.
Ability to effectively coordinate industry and government information system A&A activities to meet acquisition milestones.
Strong leadership skills and ability to develop and lead a high-performing team focused on the customer’s mission.
Strong business acumen and analytical and metrics capabilities.
Ability to work in a dynamic environment and interact effectively with DOD personnel, military and civilian personnel, and industry partners.
Proficiency with MS Office Suite, including Word, Excel, PowerPoint, and Outlook.
Availability to work before or after typical office hours.
Appropriate IAM III certification, such as CISSP or CISM.
Willingness to travel short term (less than 90 days).

Nice To Haves

Education relevant to computer engineering, information security, information management, or computer science.
Experience in technical project management.

Responsibilities

Review information systems for compliance with applicable DCID, ICD, and customer directives and guidance, and make recommendations to the USG.
Provide information system security advice and guidance to government and industry partners for protecting data at all classification levels, including SCI.
Provide technical guidance and support for preparing responses to A&A questions for USG approval.
Evaluate and recommend approval, disapproval, or waivers for information systems processing national security data at industry or government facilities.
Support development and implementation of information assurance, information technology, and information management directives and guidance, and provide input for future security policy.
Support or conduct approved site visits and assessments to inspect and verify information system reports and plans; prepare written reports for government review and approval.
Prepare reports and memoranda, including Memoranda for the Record, Memoranda of Agreement, Authorizations to Proceed, status briefs, and technical briefs.
Update and maintain government-provided databases with current government and industry information system status and contact details.
Prepare, review, and record notifications and status messages indicating systems’ A&A state in a government-approved format.
Ensure information system security requirements are addressed and appropriate documentation is prepared by system owners or programs.
Track completion of Security Assessment Reports and support their preparation, including assessment-result summaries and authorization recommendations.
Review, coordinate, and respond to information security issues as requested by the Government.
Travel on approved short-term CONUS and OCONUS site security inspections.
Provide A&A support for special programs and tactical operations-related activities.
Ensure required documents are reported through the Data Accession List (CDRL A008).
Manage and track multiple large-scale systems or programs involved in the A&A process.
Coordinate A&A activities of industry and government information systems to meet acquisition milestone requirements.
Work with mixed-skill-level teams to support knowledge and skill transfer and lead a high-performing team focused on the customer’s mission.