Security Control Assessor - RMF & SAP Specialist

TAC Integrated Solutions; Lincoln (MA); On-site; USD 100,000 - 140,000; Full time

Job summary

TAC Integrated Solutions is seeking a Security Control Assessor (SCA), Level I, to conduct comprehensive RMF-based assessments of IS security controls at Hanscom AFB, MA. This role requires TS/SCI clearance, CI polygraph, and hands-on evaluation of collateral, SCI, and SAP environments.

Responsibilities include overseeing security program policy, risk assessment, preparing SARs, POA&Ms, and coordinating with ISO, PSO, and AO/DAO to support authorization decisions.

Qualifications

• 5-7 years related experience; 3+ years experience in SAP, SCI, or Collateral Information Systems (IS) and implementation of regulations; Prior performance in role of ISSO and ISSM.
• DESIRED: SAP Experience; TRAINING: IAM Level I (in lieu of IAT Level III)

Responsibilities

• Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure
• Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)
• Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues
• Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization
• Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required
• Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system
• Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary
• Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR
• Evaluate security assessment documentation and provide written recommendations for security authorization to the Government
• Discuss recommendation for authorization and submit the security authorization package to the AO/DAO
• Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.
• Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy
• Assist the Government compliance inspections
• Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken
• Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC)
• Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries
• Evaluate the effectiveness and implementation of Continuous Monitoring Plans
• Represent the customer on inspection teams

Job description

TAC Integrated Solutions is seeking a Security Control Assessor (SCA), Level I, to conduct comprehensive RMF-based assessments of IS security controls at Hanscom AFB, MA. This role requires TS/SCI clearance, CI polygraph, and hands-on evaluation of collateral, SCI, and SAP environments.

Responsibilities include overseeing security program policy, risk assessment, preparing SARs, POA&Ms, and coordinating with ISO, PSO, and AO/DAO to support authorization decisions.