Security Control Assessor Representative Task Lead

Electrosoft; Belleville (NJ); On-site; USD 140,000 - 160,000; Full time

Job summary

Electrosoft Services, LLC is seeking a Security Control Assessor Representative (SCAR) Task Lead to oversee DoD RMF activities, eMASS, and A0 approvals at Scott Air Force Base, IL. You will manage a team delivering RMF artifacts, risk assessments, and documentation for 40+ Programs of Record, ensuring government compliance and effective communication with the AO.

The role requires DoD Secret clearance, 6+ years of relevant experience, and a graduate degree in a related field.

Qualifications

• Must have a current 8140 Cyber Security compliant certification: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC or GSNA.
• Minimum of 6 years of related experience.
• Masters or higher in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology or Software Engineering.
• Active DoD Secret security clearance required.
• Thorough understanding and experience with DoD RMF tool eMASS.
• Excellent written and verbal communication skills for senior DoD and non-DoD officials.
• Demonstrated knowledge of the DoD mission.
• Experience with PPSM is desired.

Responsibilities

• Oversee day-to-day work for contract deliverables.
• Lead effort to assess and provide to Government a list of recommended enterprise security controls/enhancements for mission assurance.
• Oversee SME support for RMF activities within eMASS or other designated tools.
• Act as primary link between team members, project managers, and the customer, ensuring schedule and budget adherence.
• Provide oversight and risk analysis recommendations to the SCA.
• Triage authorization, POA&M, and risk acceptance requests using RMF artifacts.
• Identify non-compliant submissions and document in PRR for Government approval.
• Validate that SCARs review security artifacts and assess adequacy of controls.
• Manage IV&V role within eMASS on NIPRNet/SIPRNet and provide feedback on non-compliant controls.
• Compile Authorization Official packages with risk assessments and required artifacts for AO approval.
• Review RMF packages for signature by approved authorities.
• Manage eMASS user accounts per Government direction.
• Track status of checklists and packages from submission to approval/disapproval.
• Monitor team metrics to ensure performance standards.
• Lead team meetings to ensure coverage of daily/weekly operations.
• Coordinate RMF package timelines within SCARs to address questions posed by SCA.
• Report metrics to PM as required.

Skills

Cybersecurity

RMF

Communication

Leadership

DoD clearance

Education

Masters or higher in Computer Science/Cybersecurity/Information Systems/IT/Software Engineering

Tools

eMASS

RMF

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Security Control Assessor Representative (SCAR) Task Lead

Job description

Electrosoft is seeking a Security Control Assessor Representative (SCAR) Task Lead to oversee and manage support and communication to our DoD customer requirements at Scott Air Force Base, IL. The SCAR lead will oversee and independently assess the adequacy and compliance of security controls applied from the SCAR’s to the agency on behalf of the Government SCA and Authorizing Official (AO). SCAR lead will oversee efforts to assist Government personnel with the overall responsibility to conduct independent comprehensive assessments of the management, operational, privacy and technical security controls and controls enhancements employed within or inherited by an IT system to determine the overall effectives of the controls for more than 40 Programs of Record in use across the Enterprise. The SCAR lead will manage efforts to collect, provide, and maintain current documentation on authorization processes and procedures.

Duties & Responsibilities

• Oversee day-to-day work for specific contract deliverables
• Leads effort to assess, identify, and provide to the Government, for AO approval, a listing of recommended enterprise security controls/enhancements that provide mission assurance for cyber USTRANCOM terrain systems supporting USTRANSCOM’s mission.
• Oversees and manages SME support for RMF activities within and/or outside Enterprise Mission Assurance Support Service (eMASS) or other tool as designated by the Government.
• Act as primary link between team members, project managers, and the customer, ensuring work stays on schedule, within budget according to contractual requirements
• Provide oversight and management of the technical and operational analyses of supporting artifacts and provide risk analysis recommendations to the SCA.
• Perform triage of authorization, POA&M, System Security Plan, System Categorization, and risk acceptance requests using the Govt RMF Artifact Quality Rubric.
• Identify non-compliant submissions, document in the Package Return Report (PRR), provide oversite review for accuracy and submit to the Government SCA for approval and signature.
• Validate that SCAR’s accurately review security artifacts provided by program offices or other organizations and assess both technical and functional adequacy of cybersecurity/Information Assurance (IA) controls
• Oversee and manage the process of Independent Verification and Validation (IV&V) role within eMASS on NIPRNet and SIPRNet, verifying that controls are in-place, operating as intended, producing desired outcomes, and providing feedback to submitters on non-compliant security controls, adequacy of artifacts, and POA&M items, and provide the required PRR as needed.
• Manage SCAR Efforts to Compile Authorization Official packages to include risk assessment, required artifacts, and required approval documents to support risk recommendations to the AO in accordance with Government guidance.
• Oversee the Review and coordination of RMF packages such as categorizations, security plans and POA&Ms for signature by approved authorities as designated by the Government and IAW suspense assigned by the Government.
• Manage eMASS user accounts process (i.e., add, delete, and assign/update roles) for the customers instance of eMASS per Government direction.
• Track status of checklists and packages from submission through approval or disapproval decision by the AO.
• Monitor team and individual metrics to validate SCAR’s are meeting PWS required performance standards
• Lead team meetings to ensure there is a primary or alternate that can run and coordinate aspects of daily and weekly operations and coordination with the customer
• Track all RMF package timelines and assignments are coordinated within the SCARS to address questions or concerns posed by the SCA
• Manage recuring WAR, MSR, IPR, and any other contractually required metrics and report them to the PM as required
• Manage personnel absences, appointments, PTO authorizations, semi and annual performance evaluations and daily CCMD checks are communicated and coordinated as required
• Monitor the health of the Security Posture Dashboard daily, communication and report any variances to the PM or Cyber Security Risk Analyst
• Monitor the status of PPSM deliverables and communication and report any variances to the PM

Basic Qualifications

• Must have a current 8140 Cyber Security compliant certification in one of the following:
  • CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC or GSNA
• Minimum of 6 years of related experience
• Masters or higher in: Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology and Software Engineering
• Requires Active DoD Secret security clearance
• Thorough understanding and experience with DoD RMF tool eMASS
• Excellent written and verbal communication skills, demonstrating the ability to present material to senior DoD and non-DoD officials.
• Able to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.
• Demonstrated knowledge and understanding of the DoD mission
• Experience with Ports, Protocols, Services Management (PPSM) is desired

Pay Range

$140,000-$160,000 USD

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled