Security Control Assessor II – RMF/SAP (TS/SCI)

TAC Integrated Solutions; Virginia (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

TAC Integrated Solutions is seeking a Security Control Assessor (SCA), Level II, in Crystal City, VA. The role requires TS/SCI clearance and experience conducting comprehensive RMF-based security assessments across Collateral, SCI, and SAP environments.

The SCA will oversee policy development, authorization packages, and vulnerability remediation, advising key government stakeholders and ensuring SDLC security alignment. The position emphasizes strong experience with RMF and JSIG guidance.

Qualifications

• 7-9 years related experience in security assessments.
• 4+ years experience in SAP, SCI, or Collateral Information Systems (IS).
• Prior performance in role of ISSO and ISSM is desirable.
• IAT Level 3 or IAM Level 1 certification is required or desired.

Responsibilities

• Oversee development, implementation and evaluation of IS security program policy with emphasis on SAP integration.
• Assess ISs using RMF methodology in accordance with JSIG guidance.
• Advise ISO, IDO, PSO, and AO/DAO on assessment and authorization issues.
• Evaluate Authorization packages and make recommendations to AO/DAO for authorization.
• Evaluate IS threats and vulnerabilities and suggest additional safeguards.
• Advise government on impact levels for C, I, A of information systems.
• Prepare SAR and POA&M for Authorization Boundaries and oversight.
• Review security documentation and provide written recommendations for security authorization.
• Contribute to inspections and remediation activities across SDLC.

Skills

Security assessment

RMF methodology

JSIG/DMF guidance

ISSO/ISSM experience

IA/IAT IAM/IAM certification

Job description

TAC Integrated Solutions is seeking a Security Control Assessor (SCA), Level II, in Crystal City, VA. The role requires TS/SCI clearance and experience conducting comprehensive RMF-based security assessments across Collateral, SCI, and SAP environments.

The SCA will oversee policy development, authorization packages, and vulnerability remediation, advising key government stakeholders and ensuring SDLC security alignment. The position emphasizes strong experience with RMF and JSIG guidance.