Senior Security Control Assessor
About The Position
SecuriGence, part of Chenega Military, Intelligence & Operations Support (MIOS), is seeking a Senior Security Control Assessor to support government operations and national security missions in Arlington, Virginia. The role provides cybersecurity assessment and advisory support to the A&A Manager and contributes to the authorization and continuous monitoring of information systems (IS). The assessor evaluates system security documentation, assesses risks and proposed system changes, develops assessment and monitoring plans, and documents findings and recommendations. The role also supports security authorization decisions by advising relevant stakeholders, including the A&A Manager, CISO, and Authorizing Official (AO).
Requirements
- Bachelor’s degree, or an associate’s degree with at least 2 years of relevant experience, or a high school diploma or GED equivalent with at least 4 years of relevant experience.
- At least 5 years of relevant experience.
- DoD 8140 IAM Level II certification, such as CAP, CASP, CISM, CISSP, GSLC, or CCISO.
- Top Secret clearance with SCI eligibility.
- Strong knowledge of Risk Management Framework (RMF) 800-37 and continuous monitoring 800-137.
- Expert knowledge and hands-on experience with FISMA systems, NIST 800-series guidelines, FIPS, Security Assessment and Authorization (SA&A) requirements and processes, continuous monitoring frameworks and tools, POA&M policies, vulnerability and patch management, risk management, and project management.
- Proficiency with Microsoft Word, Excel, and PowerPoint.
- Proficiency with vulnerability and scanning tools and ability to interpret risk posture from assessment reports.
- Experience with project management and tracking.
- Experience assessing cloud-based security authorizations, including FedRAMP, AWS, and Azure, and NIST control responsibilities.
- Experience with SAP/JSIG.
- Expertise documenting or reviewing system security plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), and other documents under NIST 800 guidelines.
- Experience creating Security Assessment Plans, Security Assessment Reports, and executive-level briefings.
Responsibilities
- Advise the A&A Manager on Confidentiality, Integrity, and Availability impact levels for information on systems.
- Conduct a Security Assessment Plan (SAP) for each package assessment.
- Ensure security assessments are completed for each information system and packages are submitted by their target dates.
- Initiate a Plan of Action and Milestones (POA&M) for each information system, documenting identified weaknesses and suspense dates based on Security Assessment Report (SAR) findings and recommendations.
- Evaluate security assessment documentation and provide written security authorization recommendations to the A&A Manager, CISO, and AO.
- Assess proposed changes to information systems, their operating environments, and mission needs that could affect system authorization.
- Serve as a cybersecurity technical advisor to the A&A Manager for matters under their purview.
- Contribute to development of a continuous monitoring strategy that conforms to applicable DoD enterprise- or Component-level strategies.
- Determine and document in the SAR a risk level for every noncompliant security control in each system baseline.
- Determine and document an aggregate system risk level in the SAR, including key assessment drivers and consideration of threats, vulnerabilities, potential impacts, and existing or planned risk mitigation.
- Develop a continuous monitoring plan specific to the information system.
- Perform other duties as assigned.
Benefits
- The employer states that it offers a broad range of benefits but does not specify individual benefit types.
- Professional development opportunities, including on-the-job learning experiences and formal development programs.
- Well-being programs and flexibility to make daily choices supporting health and well-being.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
