Security Control Assessor

Life Cycle Engineering; Springfield (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Affordable Medical/Dental/Vision Plans

Paid Vacation, Holiday, Sick Leave

401(k) matching

Flexible Schedules

Continuing Education and Professional Development

Job summary

Life Cycle Engineering is seeking a Security Control Assessor to support the National Geospatial-Intelligence Agency in Springfield, VA. You will manage accreditation packages and authorize the operation of systems based on acceptable risk levels.

The ideal candidate should have a Bachelor's degree in a technical discipline and an active DoD Top Secret/SCI clearance. Knowledge of risk management processes and cybersecurity principles is required. A strong understanding of networking and the Risk Management Framework (RMF) is essential.

Benefits include affordable medical plans, 401(k) matching, and paid vacation.

Qualifications

• Must have an active DoD Top Secret/SCI security clearance.
• Three years of full-time professional experience in cybersecurity.
• Knowledge of laws, regulations, policies, and ethics related to cybersecurity.

Responsibilities

• Manage and approve accreditation packages.
• Review documents to confirm acceptable risk levels.
• Provide cybersecurity support to NGA.

Skills

Knowledge of computer networking concepts

Knowledge of risk management processes

Knowledge of cybersecurity and privacy principles

Skill in discerning protection needs

Ability to coordinate cyber operations

Education

Bachelor's degree in technical discipline

Tools

Risk Management Framework (RMF)

Encryption methods

Firewalls

Job description

Security Control Assessor (Authorizing Official)

Position Summary:

As Security Control Assessor (Authorizing Official/AO) you will provide cybersecurity support to the National Geospatial-Intelligence Agency (NGA) in Springfield, VA. You will award authorization to operate (ATO) for systems and/or networks based on the determination of acceptable risk.

Clearance Requirement

• Must have an active DoD Top Secret/SCI security clearance

Essential Functions and Responsibilities

• Manage and approve accreditation packages (e.g., ISO/IEC 15026-2).
• Establish acceptable limits for the software application, network, or system.
• Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.

Required Education, Skills, and Experience

• Bachelor's degree in technical discipline from an accredited college or university

Certification Requirements

• Level II certification (CAP, CASP+, CISM, CISSP or equivalent)

• Three (3) years of full-time professional experience in establishing, implementing, and tracking project plans (more experience required for sr. level openings).
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cybersecurity and privacy principles and tools.
• Knowledge of the Risk Management Framework (RMF) and Assessment and Authorization process.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Skill in discerning the protection needs (i.e., security controls) of information systems and networks.
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to coordinate cyber operations with other organization functions or support activities.

Physical Demands and Expectations

• Regular physical activity to include walking, climbing stairs, bending, stooping, reaching, lifting (up to 15 pounds), and standing; occasional prolonged sitting
• Ability to speak, read, hear and write, with or without assistance
• Ability to use phone and computer systems, copier, fax and other office equipment

Benefits

• Affordable Medical/Dental/Vision Plans for employees and their families
• Free Employee Life and Disability Insurance, with supplemental coverage options available
• Health Savings Account and Flexible Savings Account options
• Company matched 401(k) & company-funded Employee Stock Ownership Program (ESOP)
• Paid Vacation, Holiday, Sick Leave
• Dynamic employee innovation/entrepreneurship program which includes education, empowerment, and monetary rewards
• Continuing Education and Professional Development programs at all levels
• Flexible Schedules and Relaxed Dress Code
• Employer-sponsored events, social collaboration, and open communication
• Free access to an extensive online training library, including certification prep
• Bonus Program for outstanding contributions, Employee Referral Program, numerous Recognition Opportunities, and more

Benefits may vary by business unit and location.

http://www.lce.com/Employee_Benefits_358.html

LCE shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on race, color, religion, sex, sexual orientation, gender identity, or national origin. LCE will not discriminate on the basis of pregnancy, childbirth, or related medical conditions, including lactation. LCE will also not discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. LCE shall also abide by the requirements of 29 CFR Part 471, Appendix A.