Description
The Security Control Assessor (SCA) I is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls.
Responsibilities:
- Perform oversight of the development, implementation and evaluation of IS security program policy;
- Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology;
- Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues;
- Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization;
- Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required;
- Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system;
- Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary;
- Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each;
- Authorization Boundaries assessed, based on findings and recommendations from the SAR;
- Evaluate security assessment documentation and provide written recommendations for security authorization to the Government;
- Discuss recommendation for authorization and submit the security authorization package to the AO/DAO;
- Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate;
- Review and concur with all sanitizations and clearing procedures in accordance with Government guidance and/or policy;
- Assist the Government compliance inspections;
- Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken;
- Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC);
- Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries;
- Evaluate the effectiveness and implementation of Continuous Monitoring Plans;
- Represent the customer on inspection teams.
Requirements:
- 5 + years of related experience;
- Top Secret/SCI active clearance;
- Must be willing to submit to a CI polygraph;
- IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 1 - within 6 month of hire;
- 9+ years related experience; OR 5+ years related experience AND Bachelor’s degree in a related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
Benefits:
- 401K with company match;
- Comprehensive health and wellness packages;
- Internal mobility team dedicated to helping you own your career;
- Professional growth opportunities including paid education and certifications;
- Cutting-edge technology you can learn from;
- Rest and recharge with extra paid vacation and holidays.