Senior IT SME: Security Control Assessments

ecsfederal; Washington (District of Columbia); On-site; USD 140,000 - 210,000; Full time

Job summary

ECS Federal in Washington, DC seeks a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support a Department of Justice program. You will provide senior technical expertise to security control assessments and translate evidence into defensible risk and authorization support.

You will evaluate architecture, control implementation, evidence quality, risks, findings, and recommendations, and support rigorous assessment reports with remediation guidance and continuous

Qualifications

• US citizenship with active Top Secret clearance required.
• Master's degree in Computer Science, Computer Engineering, or related field or equivalent.
• OR one of the following certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA.
• Minimum of eight years of relevant work experience.
• Must meet FBI TS/SCI background, training, facility-access, and polygraph requirements.
• Experience with enterprise change management.

Responsibilities

• Provide senior technical expertise to OCIO security control assessments.
• Evaluate architecture, control implementation, evidence quality, risks, findings, and recommendations.
• Support rigorous assessment reports, evidence traceability, remediation recommendations, and continuous improvement of SCA methods and tools.

Skills

Security risk assessment

Evidence traceability

Change management

Cross-functional collaboration

Education

Master's degree in Computer Science/Computer Engineering or related field

Certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA

Tools

JIRA/change workflow

Job description

ECS Federal in Washington, DC seeks a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support a Department of Justice program. You will provide senior technical expertise to security control assessments and translate evidence into defensible risk and authorization support.

You will evaluate architecture, control implementation, evidence quality, risks, findings, and recommendations, and support rigorous assessment reports with remediation guidance and continuous