Security Controls Assessor (SCA)

Modern Technology Solutions, Inc. (MTSI); Patterson Township (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

MTSI is seeking a Security Control Assessor (SCA) to join the NGAD team at Wright-Patterson AFB, Ohio. The candidate will perform RMF-based assessments, advise key stakeholders, and ensure proper SARs and POA&Ms are prepared for authorization boundaries.

Required experience includes 7–9 years in related roles, SAP, ISSO/ISSM background, and current Top-Secret with SCI eligibility. U.S. citizenship is required for contract work.

Qualifications

• Requires RMF-based security program oversight and policy development.
• Experience with JSIG guidance and SAP integration is essential.
• Must be able to advise ISO, IDO, PSO, and AO/DAO on assessment issues.
• Proven track record in reviewing authorization packages and SARs.

Responsibilities

• Oversee IS security program policy development and SAP networking integration.
• Assess ISs using RMF per JSIG; prepare SARs for Authorization boundary.
• Advise government stakeholders on assessment findings and risks.
• Evaluate threats and vulnerabilities and recommend safeguards.
• Coordinate POA&Ms for identified weaknesses across boundaries.
• Support security incidents and government compliance inspections.
• Ensure SDLC phases are addressed in programs and document results.
• Evaluate hardware/software for security impact on boundaries.
• Monitor and assess Continuous Monitoring Plan effectiveness.

Skills

RMF

Policy oversight

Threat assessment

Continuous Monitoring

SDLC

Education

Bachelor's degree or equivalent experience

Tools

SAP

JSIG

POA&M process

SAR preparation

Job description

MTSI is seeking a Security Control Assessor (SCA) to join the NGAD team at Wright-Patterson AFB, Ohio.

Security Control Assessor (SCA) Role & Responsibilities

• Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure
• Perform assessment of ISs, based upon the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG)
• Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues
• Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization
• Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required
• Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system
• Ensure security assessments are completed, and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary
• Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR
• Evaluate security assessment documentation and provide written recommendations for security authorization to the Government
• Discuss recommendation for authorization and submit the security authorization package to the AO/DAO
• Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate.
• Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy
• Assist the Government compliance inspections
• Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken
• Ensure organizations are addressing and conducting all phases of the system development life cycle (SDLC)
• Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries
• Evaluate the effectiveness and implementation of Continuous Monitoring Plans

Required Experience

• 7 years related experience required; 9 years' highly desired.
• Prior performance in roles such as System, Network Administrator or ISSO
• 1 year SAP Experience required (Clearly place number of SAP experience years at the beginning of the resume)
• Minimum of three (3) years’ experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties.
• Prior performance in the role of ISSO and ISSM
• Bachelor’s degree or equivalent experience (4 years)

Required Security Clearance

• Current Top-Secret Clearance with SCI Eligibility
• Prior experience for access to Special Access Program Information
• Willingness to submit to a Counterintelligence polygraph

Required Certifications

Must meet position and certification requirements outlined in DoDM 8140.03 work role 622 (Security Control Accessor) requirements.

Please Note:

U.S. Citizenship is required for this position, due to contract requirements.

#Onsite

#Skyline

#MTSI