Security Control Assessor II — RMF/JSIG Expert

General Dynamics Information Technology; West Lake Hills (TX); On-site; USD 100,000 - 150,000; Full time

Job summary

General Dynamics Information Technology is seeking a Security Control Assessor (SCA) II – Evergreen to conduct comprehensive assessments of management, operational, and technical security controls within DoD information systems. The role evaluates effectiveness, identifies weaknesses, and recommends corrective actions to ensure compliance with security requirements.

Responsibilities include overseeing IS security program policy, performing RMF/JSIG assessments, advising authorities, evaluating

Qualifications

• 3+ years of related experience in SAP, SCI, or Collateral Information Systems security, including prior performance as ISSO, ISSM, or SCA.
• 2+ years of SAP experience required.
• Expert knowledge of DoD, National, and applicable agency security policies, manuals, and standards.
• Must be able to obtain TS/SCI with CI Polygraph.

Responsibilities

• Oversee development, implementation, and evaluation of IS security program policy, integrating existing SAP network infrastructure.
• Perform assessments of ISs using RMF and JSIG guide.
• Advise IS Owners, Data Owners, Program Security Officers on assessment issues.
• Evaluate authorization packages and recommend to AO/DAO for authorization.
• Assess IS threats and vulnerabilities to determine required safeguards.
• Document assessment results, prepare SAR, and initiate POA&M.
• Provide written recommendations for security authorization to the Government.
• Assist with compliance inspections and cybersecurity incidents, ensuring corrective measures.
• Ensure SDLC considerations are addressed; evaluate hardware/software for security impact.
• Assess effectiveness of Continuous Monitoring Plans; maintain CDS knowledge.
• Assist with joint assessments of CDS with other DoD agencies.

Skills

Information Security Management

Information Security Risk Management

Information Security Standards

Information System Security

CCNA

GSEC

GICSP

IAT Level III

Education

Bachelor’s degree in a related discipline

Associate’s degree in a related area + 2 years experience

Equivalent experience (4 years)

Job description

General Dynamics Information Technology is seeking a Security Control Assessor (SCA) II – Evergreen to conduct comprehensive assessments of management, operational, and technical security controls within DoD information systems. The role evaluates effectiveness, identifies weaknesses, and recommends corrective actions to ensure compliance with security requirements.

Responsibilities include overseeing IS security program policy, performing RMF/JSIG assessments, advising authorities, evaluating