Security Control Assessor (SCA) I

Position Overview

The SCA is responsible for assessing the security controls of an Information System (IS) to determine their effectiveness, recommending corrective actions, and providing advice on security authorization issues.

Key Responsibilities

• Conduct a comprehensive assessment of IS security program policy, focusing on SAP network infrastructure.
• Assess ISs using RMF methodology in accordance with JSIG guidelines.
• Evaluate Authorization packages and make recommendations to the AO and/or DAO.
• Evaluate IS threats and vulnerabilities to determine if additional safeguards are needed.
• Ensure security assessments are completed and documented, preparing the SAR for the Authorization boundary.
• Develop and implement POA&M for identified weaknesses.
• Evaluate security assessment documentation and provide recommendations for security authorization.
• Assess changes to Authorization boundaries and mission needs.
• Review and concur with sanitization and clearing procedures.
• Avoidance of security incidents and ensuring proper corrective measures.
• Evaluate SDLC phases and hardware/software security impacts.
• Evaluate Continuous Monitoring Plans and represent the customer on inspection teams.

Qualifications

• Mandatory: 5-7 years related experience, 3+ years in SAP, SCI, or Collateral Information Systems (S) security.
• Prior performance in ISSO or ISSM roles or SCA certification (IAT Level 3 or IAM Level 1 preferred).