Security Control Assessor (SCA) I

About the Role

The Security Control Assessor (SCA) I is responsible for conducting comprehensive assessments of management, operational, and technical security controls within Information Systems (IS) to determine their effectiveness. This includes evaluating the severity of weaknesses, recommending corrective actions, and ensuring compliance with security requirements. The role covers Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities, with a focus on integrating SAP network infrastructure and applying the Risk Management Framework (RMF) methodology.

Responsibilities

• Perform oversight of IS security program policy development, implementation, and evaluation, with emphasis on SAP network integration.
• Conduct assessments of ISs based on the RMF methodology in accordance with the Joint SAP Implementation Guide (JSIG).
• Advise Information System Owners (ISOs), Information Data Owners (IDOs), Program Security Officers (PSOs), and Authorizing Officials (AOs) on assessment and authorization issues.
• Evaluate authorization packages and make recommendations for authorization.
• Assess IS threats and vulnerabilities to determine the need for additional safeguards.
• Advise on impact levels for Confidentiality, Integrity, and Availability of system information.
• Complete security assessments, document results, and prepare Security Assessment Reports (SARs).
• Initiate Plans of Action and Milestones (POA&Ms) for identified weaknesses.
• Evaluate proposed changes to authorization boundaries and operating environments.
• Review and concur with sanitization and clearing procedures.
• Assist with government compliance inspections and cybersecurity incident responses.
• Ensure organizations address all phases of the System Development Life Cycle (SDLC).
• Evaluate hardware and software for security impacts on authorization boundaries.
• Assess the effectiveness of Continuous Monitoring Plans.
• Represent the customer on inspection teams.

Requirements

• 5+ years of related experience.
• Minimum of 3 years’ experience in SAP, SCI, or Collateral IS Security and implementation of relevant regulations.
• Prior experience as an Information System Security Officer (ISSO) and Information System Security Manager (ISSM).
• Ability to regularly lift 50 lbs.
• Willingness to submit to a CI polygraph.

Qualifications

• Bachelor’s degree in a related discipline OR Associate’s degree + 2 years’ experience OR equivalent experience (4 years).
• IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 1 certification within 6 months of hire.
• Active TS/SCI security clearance.

Benefits

• 401K with company match.
• Comprehensive health and wellness packages.
• Internal mobility team for career development.
• Paid education and certifications.
• Extra paid vacation and holidays.

Pay

The likely salary range for this position is $129,813 - $156,745. Salary will be set based on experience, geographic location, and contractual requirements and could fall outside of this range.

Schedule

40 hours per week, with 10-25% travel required. Onsite work location in West Lake, TX.