Senior Security Control Assessor - SAP/SCI & RMF Expert

General Dynamics - IT; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Internal mobility opportunities

Paid education and certifications

Paid vacation and holidays

Job summary

General Dynamics - IT seeks a Security Control Assessor (SCA) II to conduct comprehensive assessments of management, operational, and technical security controls for IS and its environment. The role evaluates weaknesses, documents SARs, and recommends corrective actions to meet security requirements.

Responsibilities include RMF-based assessments per JSIG, advising ISO/IDO/PSO/DAO, and coordinating with government stakeholders on authorization.

Qualifications

• Bachelor’s degree in a related discipline or Associate’s degree in a related area + 2 years’ experience or equivalent experience (4 years).
• IAT Level III certification within 6 months of hire date (e.g., CISSP, CASP+ CE, CCNP Security, CISA).
• Experience in SAP, SCI, Collateral Information Systems security implementations and ISSO/ISSM roles.

Responsibilities

• Perform oversight of IS security program policy development, implementation and evaluation with emphasis on SAP network integration.
• Assess ISs using RMF methodology per JSIG guidance.
• Advise Government stakeholders including ISO, IDO, PSO, and AO/DAO on assessment and authorization issues.
• Evaluate Authorization packages and recommend actions to AO/DAO for authorization.
• Identify threats and vulnerabilities and determine required safeguards.
• Advise on impact levels for Confidentiality, Integrity, and Availability.
• Prepare SARs for Authorization boundaries and initiate POA&Ms for weaknesses.
• Coordinate submission of security authorization packages to AO/DAO.
• Review changes to Authorization boundaries and operating environment.
• Assist Government with security incidents and inspections.
• Ensure SDLC phases address security controls; assess hardware/software security impact.
• Represent the customer on inspection teams.

Skills

RMF methodology

Security assessment

Policy & compliance

Government stakeholder coordination

Education

Bachelor’s degree in a related discipline

Associate’s degree in related area + 2 years’ experience

IAT Level III certification (CISSP, CASP+ CE, CCNP Security, CISA, etc.)

Tools

JSIG

POA&M

Job description

General Dynamics - IT seeks a Security Control Assessor (SCA) II to conduct comprehensive assessments of management, operational, and technical security controls for IS and its environment. The role evaluates weaknesses, documents SARs, and recommends corrective actions to meet security requirements.

Responsibilities include RMF-based assessments per JSIG, advising ISO/IDO/PSO/DAO, and coordinating with government stakeholders on authorization.