Senior Security Control Assessor

MANTECH•Doral, FL

7h•Onsite

About The Position

MANTECH seeks a motivated, career- and customer-oriented Senior Security Control Assessor to join its team onsite in Doral, Florida. The role evaluates the effectiveness of information-system security controls, ensures compliance, and identifies vulnerabilities. It leads Mission Assurance activities to identify, assess, and reduce cyber-related risks to mission execution, critical capabilities, operational dependencies, and supporting information systems. The assessor manages Mission Assurance Decision Support System (MADDS) data and leads the identification, mapping, validation, and lifecycle management of Mission-Relevant Terrain in Cyberspace (MRT-C) and Key Terrain-Cyber (KT-C). The position coordinates with mission and system owners, network operators, cybersecurity personnel, and other stakeholders to document mission-critical systems, services, applications, infrastructure, dependencies, and cyber terrain. The role assesses the severity of weaknesses, recommends corrective actions, and oversees Collateral, SCI, and SAP activities related to sensitive information security. It oversees information-system security program policy, including SAP network infrastructure integration, and assesses Risk Management Framework methodologies in accordance with the Joint SAP Implementation Guide. The assessor advises security and authorization officials, evaluates authorization packages, recommends authorization, prepares Security Assessment Reports, assesses proposed authorization-boundary changes, and develops Plans of Action and Milestones for identified weaknesses. An active Secret clearance is required.

Requirements

Bachelor’s degree in cybersecurity, information technology, mathematics, or a related field and at least 5 years of experience as a Security Control Assessor or in a similar role; or a master’s degree in a related field and at least 3 years of relevant experience; or an associate degree and at least 7 years of relevant experience; or a high school diploma and at least 9 years of relevant experience.
DoD 8570.01-M IAT Level III or IAM Level III certification, such as Security+ or SecurityX.
Experience supporting Mission Assurance activities, including mission dependency analysis, mission-based risk assessments, and identification or management of MRT-C and KT-C.
Active Secret clearance.

Nice To Haves

Master’s degree in Cybersecurity, Computer Engineering, Computer Science, or another closely related IT discipline.
Experience with ServiceNow, Microsoft TechCenter, or Jira ticketing systems.
Experience with military or diplomatic operations within a J-6/G-6/S-6/A-6 Directorate, or with Special Operations Forces or the Department of State, leading and performing cybersecurity risk assessments across multiple commands, agencies, and geographically distributed locations in a Security Operations Center.
Experience using MADDS and managing or maintaining Mission Assurance, MRT-C, KT-C, critical-asset, mission-dependency, or risk data within an authoritative system of record.
Experience leading MRT-C and KT-C identification, mapping, validation, risk analysis, and mitigation across enterprise, joint, interagency, or geographically distributed environments.

Responsibilities

Determine the effectiveness of information-system security controls, ensuring compliance and identifying vulnerabilities.
Lead Mission Assurance activities to identify, assess, and reduce cyber-related risks to mission execution, critical capabilities, operational dependencies, and supporting information systems.
Manage and maintain MADDS data, keeping mission dependencies, critical assets, risk information, assessments, and mitigation actions accurately documented and current for leadership decision-making.
Lead the identification, mapping, validation, and lifecycle management of MRT-C and KT-C.
Coordinate with mission owners, system owners, network operators, cybersecurity personnel, and other stakeholders to identify mission-critical systems, services, applications, infrastructure, dependencies, and cyber terrain.
Rate the severity of weaknesses and recommend corrective actions.
Oversee Collateral, SCI, and SAP activities for sensitive information security.
Oversee information-system security program policy, including SAP network infrastructure integration, and assess RMF methodologies in accordance with the JSIG.
Advise ISO, IDO, PSO, and DAO/AO on security issues; evaluate authorization packages and recommend authorization.
Ensure security assessments are completed, prepare Security Assessment Reports, assess proposed authorization-boundary changes, and create POA&Ms for identified weaknesses.