Senior Security Control Assessor II RMF SAP Expert

General Dynamics Information Technology, Inc.; Arlington (VA); On-site; USD 153,000 - 207,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Professional growth opportunities

Paid time off

Job summary

General Dynamics Information Technology, Inc. seeks a Security Control Assessor II to conduct comprehensive assessments of management, operational, and technical security controls across IS environments, including SCI and SAP activities.

The role focuses on RMF-based assessments, advising key stakeholders, evaluating authorization packages, and driving corrective actions to address vulnerabilities.

Qualifications

• 7+ years of related experience.
• US Citizenship Required: Yes

Responsibilities

• Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing SAP network infrastructure.
• Perform assessment of ISs, based upon the RMF methodology in accordance with JSIG.
• Advise the ISO, IDO, PSO, and DAO/AO on assessment and authorization issues.
• Evaluate Authorization packages and make recommendations to the AO/DAO for authorization.
• Evaluate IS threats and vulnerabilities to determine if additional safeguards are required.
• Advise the Government on impact levels for Confidentiality, Integrity, and Availability.
• Ensure security assessments are completed and SAR prepared for the Authorization boundary.
• Initiate POA&Ms with identified weaknesses for each boundary assessed.

Skills

Information Security

Information Security Management

Information System Security

Education

Bachelor’s degree in a related discipline

Job description

General Dynamics Information Technology, Inc. seeks a Security Control Assessor II to conduct comprehensive assessments of management, operational, and technical security controls across IS environments, including SCI and SAP activities.

The role focuses on RMF-based assessments, advising key stakeholders, evaluating authorization packages, and driving corrective actions to address vulnerabilities.