Security Control Assessor I — RMF & SAP/SCI Expert

System High Corporation; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

System High Corporation in the Washington, DC area seeks an experienced Information System Security professional to lead RMF assessments for SAP, SCI and Collateral programs. This role focuses on policy oversight, risk-based evaluations and government compliance across sensitive information systems.

You will advise key government security stakeholders, evaluate authorization packages, and coordinate SAR/POA&M activities to support successful authorizations and continuous monitoring.

Qualifications

• 5 - 7 years related experience.
• Minimum of three (3) years' experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties.
• Prior performance in the role of ISSO and ISSM.

Responsibilities

• Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure.
• Perform assessment of ISs, based upon the RMF methodology in accordance with the JSIG.
• Advise the ISO, IDO, PSO, and DAO/AO on assessment and authorization issues.
• Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization.
• Evaluate IS threats and vulnerabilities to determine additional safeguards.
• Advise Government on impact levels for C/I/A.
• Ensure security assessments are completed and SAR prepared for Authorization boundary.
• Initiate a POA&M with identified weaknesses for each Authorization Boundary.

Skills

IS security

RMF methodology

Policy development

Security compliance

Security clearance

Education

Bachelor's degree in related discipline

DoD 8570.01-M IA Certification

Job description

System High Corporation in the Washington, DC area seeks an experienced Information System Security professional to lead RMF assessments for SAP, SCI and Collateral programs. This role focuses on policy oversight, risk-based evaluations and government compliance across sensitive information systems.

You will advise key government security stakeholders, evaluate authorization packages, and coordinate SAR/POA&M activities to support successful authorizations and continuous monitoring.