Security Control Assessor II - TS/SCI, SAP Expertise

Watermark Risk Management International; Virginia (MN); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Paid leave

Employee assistance program

401k

Job summary

Watermark Risk Management International is seeking a Security Control Assessor (SCA) II to lead assessments of IS security controls, including SAP/SCI and collateral environments. The role centers on RMF methodology, JSIG guidance, and identifying weaknesses with corrective actions.

You will advise the ISO/PSO/AO, prepare SARs and POA&Ms, and support authorization decisions while ensuring compliance with government guidance and DoD requirements.

Qualifications

• 7–9 years related experience in IS security.
• At least 4 years in SAP, SCI or Collateral IS security.
• Prior ISSO/ISSM or SCA experience preferred.

Responsibilities

• Perform oversight of IS security program policy development and integration of SAP network infrastructure.
• Assess ISs using RMF methodology per JSIG guidance.
• Advise the ISO, IDO, PSO, and AO on assessment issues.
• Evaluate authorization packages and provide recommendations for authorization.
• Assess IS threats and vulnerabilities to determine required safeguards.
• Prepare SAR and POA&M for authorization boundaries and findings.
• Review sanitization procedures per government guidance.

Skills

RMF methodology

JSIG guidance

Policy development

Threat assessment

Security authorization

Communication skills

Education

Bachelor’s degree in related area

Associate’s degree in related area + 2 years experience

Tools

RMF tools

Job description

Watermark Risk Management International is seeking a Security Control Assessor (SCA) II to lead assessments of IS security controls, including SAP/SCI and collateral environments. The role centers on RMF methodology, JSIG guidance, and identifying weaknesses with corrective actions.

You will advise the ISO/PSO/AO, prepare SARs and POA&Ms, and support authorization decisions while ensuring compliance with government guidance and DoD requirements.