Security Controls Assessor - TS/SCI, RMF & JSIG

Arenatechnologies; Washington (District of Columbia); On-site; USD 160,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Retirement plans

Health savings accounts

Life and disability insurance

Paid time off

Job summary

Systems Planning and Analysis, Inc. (SPA) seeks a Security Controls Assessor to conduct comprehensive assessments of management, operational, and technical security controls within information systems, determining overall effectiveness and recommending corrective actions.

Responsibilities include RMF/JSIG compliance, advising stakeholders, and evaluating authorization packages for the Authorizing Official. The role requires identifying threats, documenting assessments, preparing SARs, initiating

Qualifications

• Master's Degree in related field.
• 7 years of relevant experience.
• 2 years in SAP, SCI or Collateral information systems security.
• Must meet DoD 8570.01-M for IA Technician III or IA Manager II.
• Active TS/SCI clearance required and maintain it during employment.

Responsibilities

• Conduct comprehensive assessment of management, operational, and technical security controls within an information system.
• Assess RMF/JSIG compliance, advise stakeholders, and evaluate authorization packages for the Authorizing Official.
• Identify threats and vulnerabilities, document assessments, prepare SARs, and initiate POA&Ms.
• Review sanitization procedures, support inspections and incident responses, and assess security impact of changes.
• Evaluate Continuous Monitoring Plans and provide actionable recommendations for secure operations.

Skills

RMF knowledge

ISSO/ISSM experience

DoD 8570.01-M compliance

Security assessments

Threat/vulnerability analysis

Education

Master's Degree

Job description

Systems Planning and Analysis, Inc. (SPA) seeks a Security Controls Assessor to conduct comprehensive assessments of management, operational, and technical security controls within information systems, determining overall effectiveness and recommending corrective actions.

Responsibilities include RMF/JSIG compliance, advising stakeholders, and evaluating authorization packages for the Authorizing Official. The role requires identifying threats, documenting assessments, preparing SARs, initiating