Security Control Assessor II — SAP/SCI Focus

Targeted Solutions, LLC; Bedford (MA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Generous PTO

Flexible holiday package

Tax-free healthcare cost reimbursement

401K with 4% matching

Job summary

Targeted Solutions, LLC seeks a Security Control Accessor II to assess management, operational, and technical security controls across IS environments, including SAP/SCI/SAP contexts, and to report on weaknesses with corrective actions.

The role covers collaboration with government teams to review RMF-based assessments, develop SARs, and support authorization decisions while ensuring SDLC security integrity and continuous monitoring.

Qualifications

• Bachelor's degree or equivalent experience (4 years).
• 7-9 years related experience; 4+ years' experience in SAP, SCI, or Collateral Information Systems (S) security and implantation of regulations identified in the duties.
• Prior performance in the role of ISSO and ISSM or SCA.

Responsibilities

• Oversee development, implementation and evaluation of IS security program policy with emphasis on SAP network infrastructure.
• Assess ISs using RMF methodology per JSIG.
• Advise the ISO, IDO, Program Security Officer, and DAO/AO on assessment and authorization issues.
• Evaluate authorization packages and make recommendations for authorization.
• Evaluate threats and vulnerabilities to determine additional safeguards.
• Advise on impact levels for Confidentiality, Integrity, and Availability.

Skills

RMF/JSIG Knowledge

Security Assessment

ISSO/ISSM experience

Education

Bachelor's degree or equivalent experience

Job description

Targeted Solutions, LLC seeks a Security Control Accessor II to assess management, operational, and technical security controls across IS environments, including SAP/SCI/SAP contexts, and to report on weaknesses with corrective actions.

The role covers collaboration with government teams to review RMF-based assessments, develop SARs, and support authorization decisions while ensuring SDLC security integrity and continuous monitoring.