Security Control Assessor II — TS/SCI, RMF Expert

HRUCKUS; Colorado Springs (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

HRUCKUS is seeking an experienced Security Control Assessor II to conduct comprehensive assessments of management, operational, and technical security controls within Information Systems and ensure compliance across Collateral, Sensitive Compartmented Information, and Special Access Program activities.

The candidate will evaluate authorization packages, assess threats, initiate POA&Ms, and advise stakeholders based on RMF/JSIG guidelines.

Qualifications

• 7 to 9 years related experience.
• Active TS/SCI clearance.
• Minimum of four (4) years of experience in SAP, SCI or Collateral Information Systems Security and the implementation of regulations identified in the description of duties.
• Prior performance in the role of ISSO, ISSM, or SCA.
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Manager Level II.
• Must be able to regularly lift 50lbs.
• Eligibility for access to Special Access Program Information.
• Willingness to submit to a Counterintelligence polygraph.

Responsibilities

• Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure.
• Perform assessment of ISs, based upon the RMF methodology in accordance with the JSIG.
• Advise the ISO, IDO, PSO, and the DAO AO on assessment and authorization issues.
• Evaluate Authorization packages and make recommendations to the AO/DAO for authorization.
• Evaluate IS threats and vulnerabilities to determine additional safeguards required.
• Advise Government on impact levels for Confidentiality, Integrity, and Availability.
• Prepare Security Assessment Report (SAR) for the Authorization boundary.
• Initiate POA&Ms with weaknesses for each boundary assessed.
• Evaluate security assessment documentation and provide written recommendations for security authorization.
• Discuss recommendation for authorization and submit the security authorization package to the AO/DAO.
• Assess changes to Authorization boundaries operating environment and mission needs to determine continuation to operate.
• Review and concur with sanitization/clearing procedures.
• Assist Government compliance inspections.
• Assist Government with cybersecurity incidents and ensure corrective actions.
• Ensure SDLC phases are addressed.
• Evaluate hardware/software security impact on boundaries.
• Evaluate effectiveness of Continuous Monitoring Plans.
• Represent the customer on inspection teams

Skills

Active TS/SCI clearance

RMF/JSIG knowledge

Security assessment experience

Lifting 50 lbs

Education

Bachelor’s degree

Job description

HRUCKUS is seeking an experienced Security Control Assessor II to conduct comprehensive assessments of management, operational, and technical security controls within Information Systems and ensure compliance across Collateral, Sensitive Compartmented Information, and Special Access Program activities.

The candidate will evaluate authorization packages, assess threats, initiate POA&Ms, and advise stakeholders based on RMF/JSIG guidelines.