Security Controls Assessor (Pipeline)

electro soft; Belleville (IL); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Comprehensive benefits

Team-building activities

Growth opportunities

Job summary

Electrosoft Services, Inc. is seeking a Security Control Assessor - Representative (SCA-R) to support our DoD customer located at Scott Air Force Base, IL. In this role, you will be responsible for assessing the adequacy of security controls and providing recommendations to ensure compliance with government standards.

The ideal candidate will have at least 5 years of experience in security assessment, hold an IAM-III certification, and possess a DoD Secret security clearance. You will work closely with government personnel to verify and document security controls across various programs.

Qualifications

• 5+ years of related experience in security assessment.
• Active IAM-III certification required.
• Thorough understanding of DoD RMF tool eMASS.

Responsibilities

• Assess security controls and provide recommendations to the Government.
• Perform risk analysis and recommend risk mitigation strategies.
• Coordinate RMF packages for Government approval.

Skills

IAM-III certification (CISSP, CISM)

DoD security clearance

Communication skills

DoD RMF knowledge

Education

BA/BS degree from an accredited university

Tools

eMASS

PPSM knowledge

Job description

Electrosoft Services, Inc. is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, enterprise IT modernization, and software solutions. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Job Description

Electrosoft is seeking a Security Control Assessor - Representative (SCA-R) to support our DoD customer at Scott Air Force Base, IL. The SCA-R will independently assess the adequacy and compliance of security controls applied to the agency on behalf of the Government SCA and Authorizing Official (AO). SCA-R personnel will assist Government personnel with the overall responsibility to conduct independent comprehensive assessments of the management, operational, privacy and technical security controls and controls enhancements employed within or inherited by an IT system to determine the overall effectives of the controls for more than 52 Programs of Record in use across the Enterprise. The SCA-R will collect, provide, and maintain current documentation on authorization processes and procedures.

Duties & Responsibilities

• Assess, identify, and provide to the Government, for AO approval, a listing of recommended enterprise security controls/enhancements that provide mission assurance for cyber USTRANCOM terrain systems supporting USTRANSCOM’s mission.
• Provide SME support for RMF activities within and/or outside Enterprise Mission Assurance Support Service (eMASS) or other tool as designated by the Government.
• Provide technical and operational analyses of supporting artifacts and provide risk analysis recommendations to the SCA.
• Perform triage of authorization, POA&M, System Security Plan, System Categorization, and risk acceptance requests using the Govt RMF Artifact Quality Rubric.
• Identify non-compliant submissions, document in the Package Return Report (PRR), and submit to the Government SCA for approval and signature.
• Review security artifacts provided by program offices or other organizations and assess both technical and functional adequacy of cybersecurity/Information Assurance (IA) controls
• Perform the Independent Verification and Validation (IV&V) role within eMASS on NIPRNet and SIPRNet, verifying that controls are in-place, operating as intended, producing desired outcomes, and providing feedback to submitters on non-compliant security controls, adequacy of artifacts, and POA&M items, and provide the required PRR as needed.
• Compile Authorization Official package to include risk assessment, required artifacts, and required approval documents to support risk recommendations to the AO in accordance with Government guidance.
• Review and coordinate RMF packages such as categorizations, security plans and POA&Ms for signature by approved authorities as designated by the Government and IAW suspense assigned by the Government.
• Manage eMASS user accounts (i.e., add, delete, and assign/update roles) for the customers instance of eMASS per Government direction.
• Track status of checklists and packages from submission through approval or disapproval decision by the AO.

Qualifications/Certifications

• Requires Active IAM-III certification (e.g. CISSP, CISM)
• Minimum of 5 years of related experience
• Requires Active DoD Secret security clearance
• BA/BS degree from an accredited university
• Thorough understanding and experience with DoD RMF tool eMASS
• Excellent written and verbal communication skills, demonstrating the ability to present material to senior DoD and non-DoD officials.
• Able to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.
• Demonstrated knowledge and understanding of the DoD mission
• Experience with Ports, Protocols, Services Management (PPSM) is desired

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled