Security Control Assessor II — TS/SCI Cleared

General Dynamics Information Technology; Virginia (MN); On-site; USD 143,000 - 181,000; Full time

Benefits offered by this job

401K with company match

Health and wellness packages

Internal mobility team

Paid education and certifications

Paid time off

Job summary

General Dynamics Information Technology is seeking a Security Control Assessor II to lead comprehensive risk assessments of management, operational, and technical security controls for IS environments, including SAP, SCI, and SAP SAPA activities. You will advise government stakeholders on assessment issues and help prepare authorization packages.

Qualifications include 7+ years in IS security, 4+ years in SAP/SCI, a related degree or equivalent experience, and IAT III certification within 6

Qualifications

• Bachelor’s degree in a related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years)
• 7+ years related experience
• Minimum of four (4) years’ experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties.
• Prior performance in the role of an ISSO and ISSM or SCA
• IAT Level III certification within 6 months of hire date (CISSP, CASP+ CE, CCNP Security, CISA, etc.)
• TS/SCI clearance and ability to obtain CI Polygraph

Responsibilities

• Perform oversight of the development, implementation and evaluation of IS security program policy (SAP network infrastructure integration)
• Evaluate ISs security controls using RMF and JSIG guidance
• Advise the ISO/IDO/PSO/DAO/AO on assessment and authorization issues
• Evaluate Authorization packages and recommend for authorization
• Assess IS threats and vulnerabilities and suggest additional safeguards
• Advise on impact levels for Confidentiality, Integrity, and Availability
• Prepare SAR for the Authorization boundary
• Initiate POA&M for identified weaknesses
• Provide written recommendations for security authorization to the Government
• Discuss authorization with AO/DAO and submit the package
• Review changes to Authorization boundaries and mission needs
• Ensure proper sanitization and clearing procedures per Government guidance
• Support Government compliance inspections and security incidents
• Ensure SDLC phases are addressed and security controls evaluated
• Assess hardware/software security impact on boundaries
• Evaluate Continuous Monitoring plans and effectiveness
• Represent the customer on inspection teams

Skills

RMF methodology

JSIG guidance

Security risk assessment

Policy advisory

Education

Bachelor’s degree or equivalent

Associate’s degree + 2 years experience

Job description

General Dynamics Information Technology is seeking a Security Control Assessor II to lead comprehensive risk assessments of management, operational, and technical security controls for IS environments, including SAP, SCI, and SAP SAPA activities. You will advise government stakeholders on assessment issues and help prepare authorization packages.

Qualifications include 7+ years in IS security, 4+ years in SAP/SCI, a related degree or equivalent experience, and IAT III certification within 6