Security Control Assessor (SCA) II - West Lake, TX area

General Dynamics Information Technology; West Lake Hills (TX); On-site; USD 100,000 - 150,000; Full time

Job summary

General Dynamics Information Technology is seeking a Security Control Assessor (SCA) II – Evergreen to conduct comprehensive assessments of management, operational, and technical security controls within DoD information systems. The role evaluates effectiveness, identifies weaknesses, and recommends corrective actions to ensure compliance with security requirements.

Responsibilities include overseeing IS security program policy, performing RMF/JSIG assessments, advising authorities, evaluating

Qualifications

• 3+ years of related experience in SAP, SCI, or Collateral Information Systems security, including prior performance as ISSO, ISSM, or SCA.
• 2+ years of SAP experience required.
• Expert knowledge of DoD, National, and applicable agency security policies, manuals, and standards.
• Must be able to obtain TS/SCI with CI Polygraph.

Responsibilities

• Oversee development, implementation, and evaluation of IS security program policy, integrating existing SAP network infrastructure.
• Perform assessments of ISs using RMF and JSIG guide.
• Advise IS Owners, Data Owners, Program Security Officers on assessment issues.
• Evaluate authorization packages and recommend to AO/DAO for authorization.
• Assess IS threats and vulnerabilities to determine required safeguards.
• Document assessment results, prepare SAR, and initiate POA&M.
• Provide written recommendations for security authorization to the Government.
• Assist with compliance inspections and cybersecurity incidents, ensuring corrective measures.
• Ensure SDLC considerations are addressed; evaluate hardware/software for security impact.
• Assess effectiveness of Continuous Monitoring Plans; maintain CDS knowledge.
• Assist with joint assessments of CDS with other DoD agencies.

Skills

Information Security Management

Information Security Risk Management

Information Security Standards

Information System Security

CCNA

GSEC

GICSP

IAT Level III

Education

Bachelor’s degree in a related discipline

Associate’s degree in a related area + 2 years experience

Equivalent experience (4 years)

Job description

Job Qualifications

• Information Security Management
• Information Security Risk Management
• Information Security Standards
• Information System Security

Certifications

• Cisco Certified Network Associate (CCNA)
• GIAC Security Essentials (GSEC)
• Global Industrial Cyber Security Professional Certification (GICSP)

Experience

3+ years of related experience in SAP, SCI, or Collateral Information Systems security, including prior performance as ISSO, ISSM, or SCA. 2+ years of SAP experience required.

US Citizenship

Yes

Job Title

Security Control Assessor (SCA) II – Evergreen

Description

The Security Control Assessor (SCA) II conducts comprehensive assessments of management, operational, and technical security controls within or inherited by an information system (IS). The role evaluates effectiveness, identifies weaknesses, and recommends corrective actions to ensure compliance with security requirements.

Responsibilities

• Oversee development, implementation, and evaluation of IS security program policy, integrating existing SAP network infrastructure.
• Perform assessments of ISs using the Risk Management Framework (RMF) methodology and the Joint Special Access Program (JSIG) guide.
• Advise IS Owners, Data Owners, Program Security Officers, and Delegated/Authorizing Officials on assessment and authorization issues.
• Evaluate authorization packages and recommend to the AO/DAO for authorization.
• Assess IS threats and vulnerabilities to determine required safeguards.
• Determine impact levels for confidentiality, integrity, and availability.
• Document assessment results, prepare the Security Assessment Report (SAR), and initiate Plan of Action and Milestones (POA&M).
• Provide written recommendations for security authorization to the Government.
• Review and concur with sanitization and clearing procedures per Government guidance.
• Assist with compliance inspections and cybersecurity incidents, ensuring corrective measures are taken.
• Ensure organization addresses all phases of the system development life cycle (SDLC).
• Evaluate hardware and software for security impact on authorization boundaries.
• Assess effectiveness of Continuous Monitoring Plans.
• Maintain knowledge of Information Systems, Network Appliances, and Cross-Domain Solutions (CDS).
• Assist with joint assessments of CDS with other DoD agencies.

Other Requirements

• Must be able to lift 50 lbs regularly.
• Expert knowledge of DoD, National, and applicable agency security policies, manuals, and standards.
• Proficient in Microsoft Office (Word, PowerPoint, Excel).

Education

• Bachelor’s degree in a related discipline.
• Associate’s degree in a related area plus two years of experience.
• Equivalent experience (four years).

Additional Certifications (within 6 months of hire)

• IAT Level III or IAM Level III (e.g., CISSP, CASP+, CE, CCNP Security, CISA).

Clearance Required To Start

• TS/SCI required.
• Must be able to obtain TS/SCI with CI Polygraph.

Benefits

• Comprehensive benefits and wellness packages, including 401(k) with company match.
• Paid time off and vacation.
• Health, dental, vision plans, and disability benefits.
• Flexible work options for eligible employees.

Equal Opportunity

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans.