Security Control Assessor I (TS/SCI) — RMF & SAP Focus

General Dynamics Information Technology; Arlington (VA); On-site; USD 97,000 - 131,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Paid time off

Professional growth opportunities

Job summary

General Dynamics Information Technology is seeking a Security Control Assessor (SCA) I to perform comprehensive assessments of management, operational, and technical security controls across IS environments, including SAP, SCI, and Collateral systems. The role emphasizes RMF-based assessments, policy oversight, and advising government stakeholders on authorization decisions.

The position requires extensive experience in security controls, with focus on IS protection, cybersecurity incident

Qualifications

• 9+ years related experience; OR 5+ years related experience AND Bachelor’s degree OR Associate’s degree + 2 years’ experience OR equivalent (4 years).
• Minimum of three (3) years’ experience in SAP, SCI or Collateral IS Security and regulatory implementations.
• Prior ISSO/ISSM experience preferred.

Responsibilities

• Perform oversight of IS security program policy development, implementation and evaluation.
• Assess ISs using RMF per JSIG guidance; advise ISO/IDO/PSO/DAO/AO on issues.
• Evaluate authorization packages and provide written recommendations to Government.
• Assist in security incident response and SDLC/compliance activities.

Skills

RMF assessment

Policy governance

Stakeholder advisory

Security testing

Education

Bachelor’s degree in a related discipline

Tools

JSIG

RMF

Job description

General Dynamics Information Technology is seeking a Security Control Assessor (SCA) I to perform comprehensive assessments of management, operational, and technical security controls across IS environments, including SAP, SCI, and Collateral systems. The role emphasizes RMF-based assessments, policy oversight, and advising government stakeholders on authorization decisions.

The position requires extensive experience in security controls, with focus on IS protection, cybersecurity incident