Security Control Assessor

Quadrant, Inc.; Belleville (IL); On-site; USD 103,500 - 126,500; Full time

Benefits offered by this job

Healthcare benefits

Job summary

Quadrant, Inc. in Belleville, IL seeks a Security Control Assessor to support DoD programs at Scott Air Force Base. The role requires evaluating security controls, RMF artifacts, and performing IV&V in eMASS, with a focus on mission assurance.

Candidates must hold Active Secret clearance, 5–7 years of related experience, and a current 8140-compliant certification (CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC or GSNA). Masters degree preferred.

Qualifications

• Active Secret clearance required.
• 5–7 years of related experience.
• DoD RMF knowledge with eMASS experience.

Responsibilities

• Support DoD customer at Scott Air Force Base, IL.
• Independently assess the adequacy and compliance of security controls.
• Assist with comprehensive independent assessments of security controls and their enhancements.
• Compile authorization documentation and provide recommendations for enterprise security controls.

Skills

Effective communication

Present findings to leaders

DoD RMF familiarity

Education

Masters degree or higher

Tools

eMASS

Job description

Security Control Assessor

Belleville, IL

Pay From: 115,000 Per Year

Requirements

• Security Control Assessor Representative (SCAR)
• Active Secret required
• Must have a current 8140 Cyber Security compliant certification: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC or GSNA
• Minimum of 5 to 7 years of related experience
• Thorough understanding and experience with DoD RMF tool eMASS
• Excellent written and verbal communication skills, demonstrating the ability to present material to senior DoD and non-DoD officials.
• Able to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.
• Demonstrated knowledge and understanding of the DoD mission
• Experience with Ports, Protocols, Services Management (PPSM) is desired
• Masters or higher in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology and Software Engineering

Duties

• Support DoD customer at Scott Air Force Base, IL.
• Independently assess the adequacy and compliance of security controls applied to the agency on behalf of the Government SCA and Authorizing Official (AO).
• Assist Government personnel with the overall responsibility to conduct comprehensive independent assessments of management, operational, privacy and technical security controls and their enhancements within or inherited by an IT system for more than 40 Programs of Record.
• Collect, provide, and maintain current documentation on authorization processes and procedures.
• Assess, identify, and provide to the Government, for AO approval, a listing of recommended enterprise security controls/enhancements that provide mission assurance for cyber USTRANCOM terrain systems supporting USTRANSCOM's mission.
• Provide SME support for RMF activities within and/or outside Enterprise Mission Assurance Support Service (eMASS) or other tool as designated by the Government.
• Provide technical and operational analyses of supporting artifacts and give risk analysis recommendations to the SCA.
• Perform triage of authorization, POA&M, System Security Plan, System Categorization, and risk acceptance requests using the Govt RMF Artifact Quality Rubric.
• Identify non‑compliant submissions, document in the Package Return Report (PRR), and submit to the Government SCA for approval and signature.
• Review security artifacts provided by program offices or other organizations and assess both technical and functional adequacy of cybersecurity/Information Assurance (IA) controls.
• Perform the Independent Verification and Validation (IV&V) role within eMASS on NIPRNet and SIPRNet, verifying that controls are in place, operating as intended, producing desired outcomes, and providing feedback to submitters on non‑compliant security controls, adequacy of artifacts, and POA&M items, and provide the required PRR as needed.
• Compile Authorization Official package to include risk assessment, required artifacts, and required approval documents to support risk recommendations to the AO in accordance with Government guidance.
• Review and coordinate RMF packages such as categorizations, security plans and POA&Ms for signature by approved authorities as designated by the Government and IAW suspense assigned by the Government.
• Manage eMASS user accounts (add, delete, and assign/update roles) for the customer's instance of eMASS per Government direction.
• Track status of checklists and packages from submission through approval or disapproval decision by the AO.

Benefits

Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act.

Equal Opportunity Statement

Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability.