Security Control Assessor (SCA) Liaison

JMA Resources; Mechanicsburg (Cumberland County); Remote; USD 110,000 - 135,000; Full time

Job summary

JMA Resources is seeking a Security Control Assessor Liaison to coordinate RMF activities, support DoD/Federal compliance and drive remediation through POA&Ms. You will liaise with assessment teams, system owners and officials to ensure findings are clearly communicated and addressed.

The role emphasizes strong RMF knowledge, security documentation, and the ability to translate complex technical findings for both technical and non-technical audiences, with a remote work option within the United

Qualifications

• 7+ years of relevant experience in cybersecurity or related areas.
• Experience as SCA or in security assessment roles (e.g., Navy Validator).
• Experience supporting RMF assessments and A&A activities.
• Hands-on with STIG Manager, eMASS, Nessus, eMASSTer and Splunk.

Responsibilities

• Facilitate communication between assessors, stakeholders and teams to clarify findings and requirements.
• Support planning and execution of security control assessments with the RMF process.
• Prepare and maintain security documentation for DoD and federal requirements.
• Analyze gaps and help develop POA&Ms and remediation strategies.
• Support A&A activities throughout the RMF lifecycle.
• Ensure policies, controls, standards and resources are applied correctly.
• Coordinate with system owners and officials to advance assessment activities and resolve findings.
• Perform other related duties as needed.

Skills

RMF knowledge

NIST 800-37/800-53

Vulnerability management

Security assessment

Communication

Stakeholder collaboration

DoD/federal regulations

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems

CompTIA Security+ CE

CCNA Security

CSA+

GICSP

SSCP

Tools

STIG Manager

eMASS

Nessus

eMASSTer

Splunk

Job description

Position Overview:

The Security Control Assessor (SCA) Liaison supports security control assessments and the Risk Management Framework (RMF) process by coordinating between assessment teams, system stakeholders, and other key partners. This role helps ensure assessment activities, security documentation, findings, and remediation efforts are clearly communicated and aligned with Department of Defense (DoD) and federal cybersecurity requirements.

Responsibilities:

• Facilitate communication between security control assessors, system stakeholders, and other teams to ensure technical findings and requirements are clearly understood.
• Support the planning and execution of security control assessments, including coordination of assessment scope, test plans, and related activities with the SCA team lead.
• Prepare, review, and maintain security documentation supporting DoD and federal cybersecurity requirements.
• Analyze identified security gaps and weaknesses and support the development of mitigation strategies and Plans of Action and Milestones (POA&Ms).
• Support Assessment and Authorization (A&A) activities throughout the RMF lifecycle.
• Help ensure applicable security policies, controls, standards, and resources are understood and applied appropriately.
• Coordinate with system owners, assessment teams, authorizing officials, and other stakeholders to support effective assessment activities and resolution of findings.
• Perform other related duties as assigned to support evolving company and client needs.

Clearance Level:

• Current or ability to obtain a Department of Defense (DoD) Secret Clearance is required. Note: To obtain a security clearance, you must be a U.S. citizen and meet the 13 adjudicative guidelines.

Required Qualifications:

• Experience:
  • 7+ years of relevant experience in cybersecurity, network security, information assurance, or related areas.
  • Experience serving as a Security Control Assessor or in a related security assessment role, such as a Navy Qualified Validator.
  • Experience supporting security assessments and authorization activities within the Risk Management Framework (RMF).
  • Hands‑on experience with security, compliance, and risk management tools such as STIG Manager, eMASS, Nessus, eMASSTer, and Splunk.
• Education/Certification:
  • Must hold a CompTIA Security+ CE certification or one of the following certification substitutions:
    • CompTIA Security X
    • Cisco Certified Network Associate – Security (CCNA Security)
    • Cybersecurity Analyst (CSA+)
    • Global Industrial Cyber Security Professional (GICSP)
    • Systems Security Certified Practitioner (SSCP)
  • Skills:
    • Strong knowledge of the Risk Management Framework (RMF), including NIST SP 800-37 and NIST SP 800-53.
    • Knowledge of vulnerability management, Impact Analysis / Predisposing conditions, and security gap analysis.
    • Understanding of applicable cybersecurity laws, regulations, and standards, including NIST, FISMA, and DoD directives.
    • Ability to analyze security assessment results, identify root causes, and recommend risk‑based mitigation strategies.
    • Strong written and verbal communication skills, including the ability to explain technical findings and recommendations to technical and non‑technical audiences.
    • Ability to collaborate effectively with system owners, assessment teams, authorizing officials, and other stakeholders.

Preferred Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related IT field.

Location & Commitments:

• Position: Full Time
• Work Arrangement: Remote

• Travel Requirements: May be required
• Location Preference: Must reside within a 6-hour drive of Mechanicsburg, Pennsylvania, due to client requirements.
• Work Hours: A typical workday consists of eight hours, totaling a forty‑hour workweek. We understand that there may be times when employees will need to adjust their work hours due to client needs or personal reasons. To help balance these demands, we offer some flexibility in work schedules.

What We Offer:

• Competitive salary and discretionary bonuses.
• Comprehensive health benefits, including medical, dental, and vision insurance.
• Flexible Paid Time Off (PTO) and holidays to help you maintain a healthy work‑life balance.
• Opportunities for professional development and continued learning.
• Hybrid/remote work arrangement with flexible hours.
• 401(k) retirement plan with company match.
• Employee recognition programs and company events.

JMA Resources is an equal opportunity employer committed to achieving a workforce with an environment free of discrimination and harassment. All aspects of employment, including recruitment, hiring, promotions, transfers, discipline, terminations, wage and salary administration, benefits, and training, are based on business needs, job requirements, and individual qualifications, without regard to race, age, color, physical or mental disability, religion, gender, sexual orientation, gender identity/expression, marital status, national origin, political affiliation or protected veteran status.

At JMA Resources, we are dedicated to fostering an inclusive environment for all qualified individuals. We provide reasonable accommodations to persons with disabilities to ensure equal access throughout the application and hiring process. If you need assistance or require an accommodation, please reach out to Amy Foy, VP of Employee Experience, at [e-mail].

JMA Resources participates in E-Verify to confirm the identity and employment eligibility of all newly hired employees.