# Security Control Assessor (SCA) I

**Company**: GDIT
**Location**: Washington, DC
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $96,569 - $130,651
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-DC-Washington/Security-Control-Assessor--SCA--I---greater-Washington--DC-area_RQ227513?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a3691cfd-bb0

## Description

The Security Control Assessor (SCA) I is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls.

Responsibilities:

- Perform oversight of the development, implementation and evaluation of IS security program policy;

- Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology;

- Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues;

- Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization;

- Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required;

- Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system;

- Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary;

- Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each;

- Authorization Boundaries assessed, based on findings and recommendations from the SAR;

- Evaluate security assessment documentation and provide written recommendations for security authorization to the Government;

- Discuss recommendation for authorization and submit the security authorization package to the AO/DAO;

- Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate;

- Review and concur with all sanitizations and clearing procedures in accordance with Government guidance and/or policy;

- Assist the Government compliance inspections;

- Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken;

- Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC);

- Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries;

- Evaluate the effectiveness and implementation of Continuous Monitoring Plans;

- Represent the customer on inspection teams.

Requirements:

- 5 + years of related experience;

- Top Secret/SCI active clearance;

- Must be willing to submit to a CI polygraph;

- IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 1 - within 6 month of hire;

- 9+ years related experience; OR ​5+ years related experience AND Bachelor’s degree in a related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).

Benefits:

- 401K with company match;

- Comprehensive health and wellness packages;

- Internal mobility team dedicated to helping you own your career;

- Professional growth opportunities including paid education and certifications;

- Cutting-edge technology you can learn from;

- Rest and recharge with extra paid vacation and holidays.

## Skills

### Required
- Information Security Management
- Information Security Risk Management
- Information Security Standards
- Information System Security

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-DC-Washington/Security-Control-Assessor--SCA--I---greater-Washington--DC-area_RQ227513?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)