Security Control Assessor Jobs

About The Position

Requirements

• Must have a current 8140 Cyber Security compliant certification in one of the following: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC or GSNA
• Minimum of 6 years of related experience
• Masters or higher in: Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology and Software Engineering
• Requires Active DoD Secret security clearance
• Thorough understanding and experience with DoD RMF tool eMASS
• Excellent written and verbal communication skills, demonstrating the ability to present material to senior DoD and non-DoD officials.
• Able to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.
• Demonstrated knowledge and understanding of the DoD mission

Nice To Haves

• Experience with Ports, Protocols, Services Management (PPSM) is desired

Responsibilities

• Oversee day-to-day work for specific contract deliverables
• Leads effort to assess, identify, and provide to the Government, for AO approval, a listing of recommended enterprise security controls/enhancements that provide mission assurance for cyber USTRANCOM terrain systems supporting USTRANSCOM’s mission.
• Oversees and manages SME support for RMF activities within and/or outside Enterprise Mission Assurance Support Service (eMASS) or other tool as designated by the Government.
• Act as primary link between team members, project managers, and the customer, ensuring work stays on schedule, within budget according to contractual requirements
• Provide oversight and management of the technical and operational analyses of supporting artifacts and provide risk analysis recommendations to the SCA.
• Perform triage of authorization, POA&M, System Security Plan, System Categorization, and risk acceptance requests using the Govt RMF Artifact Quality Rubric.
• Identify non-compliant submissions, document in the Package Return Report (PRR), provide oversite review for accuracy and submit to the Government SCA for approval and signature.
• Validate that SCAR’s accurately review security artifacts provided by program offices or other organizations and assess both technical and functional adequacy of cybersecurity/Information Assurance (IA) controls
• Oversee and manage the process of Independent Verification and Validation (IV&V) role within eMASS on NIPRNet and SIPRNet, verifying that controls are in-place, operating as intended, producing desired outcomes, and providing feedback to submitters on non-compliant security controls, adequacy of artifacts, and POA&M items, and provide the required PRR as needed.
• Manage SCAR Efforts to Compile Authorization Official packages to include risk assessment, required artifacts, and required approval documents to support risk recommendations to the AO in accordance with Government guidance.
• Oversee the Review and coordination of RMF packages such as categorizations, security plans and POA&Ms for signature by approved authorities as designated by the Government and IAW suspense assigned by the Government.
• Manage eMASS user accounts process (i.e., add, delete, and assign/update roles) for the customers instance of eMASS per Government direction.
• Track status of checklists and packages from submission through approval or disapproval decision by the AO.
• Monitor team and individual metrics to validate SCAR’s are meeting PWS required performance standards
• Lead team meetings to ensure there is a primary or alternate that can run and coordinate aspects of daily and weekly operations and coordination with the customer
• Track all RMF package timelines and assignments are coordinated within the SCARS to address questions or concerns posed by the SCA
• Manage recuring WAR, MSR, IPR, and any other contractually required metrics and report them to the PM as required
• Manage personnel absences, appointments, PTO authorizations, semi and annual performance evaluations and daily CCMD checks are communicated and coordinated as required
• Monitor the health of the Security Posture Dashboard daily, communication and report any variances to the PM or Cyber Security Risk Analyst
• Monitor the status of PPSM deliverables and communication and report any variances to the PM

Benefits

• meaningful work
• growth opportunities
• work-life balance
• sense of teamwork
• outstanding effort is recognized and rewarded
• camaraderie
• Lunch & Learn sessions
• fun group activities