Description
The Security Control Assessor (SCA) III is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls.
Responsibilities include:
- Performing oversight of the development, implementation, and evaluation of IS security program policy
- Conducting assessments of ISs based on the Risk Management Framework (RMF) methodology
- Advising the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on assessment and authorization issues
- Evaluating Authorization packages and making recommendations to the AO and/or DAO for authorization
- Assessing proposed changes to Authorization boundaries operating environment and mission needs
- Reviewing and concurring with all sanitization and clearing procedures
- Assisting the Government with security incidents and compliance inspections
- Evaluating Hardware and Software to determine security impact
- Differentiating between various types of Cross-Domain Solutions (CDS)
- Working with joint assessments of Cross-Domain Solutions with other DoD agencies
Requirements:
- 9+ years of related experience
- 2+ years of SAP experience
- Bachelor's degree in a related discipline
- Top Secret/SCI clearance with polygraph
- IAT or IAM Level III or IAAE Level I certification within 6 months of hire
- Expert knowledge of DoD, National and applicable service and agency security policy, manuals, and standards
- Ability to work in a dynamic environment and effectively interact with numerous DoD, military/civilian personnel, and industry partners