Security Control Assessor Jobs

About The Position

Requirements

• At least 7 years of related experience.
• At least 4 years of experience in SAP, SCI, or Collateral information-system security and implementation of the regulations identified in the duties.
• Prior performance in the role of ISSO, ISSM, or SCA.
• Bachelor’s degree in a related discipline, or an associate’s degree in a related area plus 2 years of experience, or equivalent experience (4 years).
• IAT Level III or IAM Level II certification within 6 months of hire.
• U.S. citizenship required.
• Must currently possess a Top Secret/SCI clearance and be willing to submit to a counterintelligence polygraph.
• Must be able to regularly lift 50 pounds.

Responsibilities

• Oversee the development, implementation, and evaluation of information-system security program policy, with special emphasis on integrating existing SAP network infrastructure.
• Assess information systems using the Risk Management Framework (RMF) in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG).
• Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and Delegated and/or Authorizing Official (DAO/AO) on assessment and authorization issues.
• Evaluate authorization packages and recommend authorization decisions to the AO and/or DAO.
• Evaluate system threats and vulnerabilities to determine whether additional safeguards are required.
• Advise the Government on confidentiality, integrity, and availability impact levels for system information.
• Ensure security assessments are completed and documented, and prepare Security Assessment Reports (SARs) for authorization boundaries.
• Initiate Plans of Action and Milestones (POA&Ms) identifying weaknesses for assessed authorization boundaries, based on SAR findings and recommendations.
• Evaluate security assessment documentation and provide written recommendations to the Government for security authorization.
• Discuss authorization recommendations and submit security authorization packages to the AO/DAO.
• Assess proposed changes to authorization boundaries, operating environments, and mission needs to determine whether operations may continue.
• Review and concur with sanitization and clearing procedures in accordance with Government guidance and policy.
• Assist the Government with compliance inspections and cybersecurity-related security incidents, ensuring appropriate corrective measures are taken.
• Ensure organizations address and conduct all phases of the system development life cycle (SDLC).
• Evaluate hardware and software to determine their security impact on authorization boundaries.
• Evaluate the effectiveness and implementation of Continuous Monitoring Plans.
• Represent the customer on inspection teams.

Benefits

• 401(k) with company match
• Medical plan options, including some with Health Savings Accounts
• Dental plan options
• Vision plan
• Paid vacation, sick and personal time, and holidays
• Paid parental leave
• Paid military, bereavement, and jury duty leave
• Short- and long-term disability benefits
• Life insurance
• Accidental death and dismemberment insurance
• Personal accident insurance
• Critical illness insurance
• Business travel and accident insurance
• Paid education and certifications
• Professional growth opportunities
• Internal mobility support