Security Controls Analyst – RMF/SAP (TS/SCI)

gdit; Dayton (OH); On-site; USD 116,000 - 157,000; Full time

Job summary

GDIT seeks a Senior Security Control Assessor to conduct comprehensive assessments of management, operational, and technical security controls for IS holdings, including SAP, SCI, and collateral environments. You will determine effectiveness, severity of weaknesses, and recommend corrective actions across the customer’s responsibility area.

Responsibilities cover RMF-based assessments, advising ISO/IDO/PSO/AO, evaluating authorization packages, and ensuring SDLC compliance.

Qualifications

• Bachelor’s degree in a related discipline or Associate’s +2 years experience or equivalent (4 years)
• 3+ years in SAP, SCI or Collateral IS Security and implementation of regulations
• IAT Level III or IAM Level I certification path within hiring window

Responsibilities

• Oversee IS security program policy development, implementation and evaluation with emphasis on SAP network infrastructure
• Assess ISs using RMF methodology per JSIG guidance
• Advise ISO, IDO, PSO, and AO/DAO on assessment and authorization issues
• Evaluate Authorization packages and provide recommendations for AO/DAO authorization
• Assess IS threats and determine extra safeguards needed
• Advise Government on impact levels for CIA for the system
• Prepare SAR and POA&M for Authorization boundaries
• Provide written security authorization recommendations to Government
• Review and discuss authorization recommendations and submit package to AO/DAO
• Assess changes to Authorization boundaries concerning mission needs
• Review sanitization procedures per Government guidance
• Assist Government with security incidents related to cybersecurity
• Ensure SDLC phases are addressed in the organization
• Evaluate hardware/software for security impact on Authorization boundaries
• Assess Continuous Monitoring plan effectiveness
• Represent customer on inspection teams

Skills

Computer Security

Firewalls

Information Security

Education

Bachelor’s degree in a related discipline

Associate’s degree in a related area + 2 years’ experience

equivalent experience (4 years)

Job description

GDIT seeks a Senior Security Control Assessor to conduct comprehensive assessments of management, operational, and technical security controls for IS holdings, including SAP, SCI, and collateral environments. You will determine effectiveness, severity of weaknesses, and recommend corrective actions across the customer’s responsibility area.

Responsibilities cover RMF-based assessments, advising ISO/IDO/PSO/AO, evaluating authorization packages, and ensuring SDLC compliance.