Senior Security Control Assessor - SAP/SCI RMF Expert

Targeted Solutions, LLC; Virginia (MN); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Generous PTO

Flexible holidays

401K with 4% matching

Tax-free healthcare cost reimbursement

Job summary

Targeted Solutions, LLC is seeking a Security Control Accessor II to perform comprehensive assessments of management, operational, and technical security controls within information systems. The role ensures controls are implemented correctly, operating as intended, and meeting security requirements.

Responsibilities include RMF-based assessments, JSIG guidance, advising key stakeholders, and documenting results in SARs and POA&Ms while supporting security incidents and SDLC compliance.

Qualifications

• Bachelor’s degree or equivalent experience required.
• 7-9 years related experience in SAP/SCI or collateral information systems security.
• Experience in ISSO/ISSM or SCA roles preferred.

Responsibilities

• Oversee development, implementation and evaluation of IS security program policy.
• Assess ISs using RMF and JSIG guidelines.
• Advise ISO/IDO/PSO/DAO/AO on assessment and authorization issues.
• Evaluate authorization packages and provide AO/DAO recommendations.
• Prepare Security Assessment Reports (SAR) and POA&M for authorized boundaries.
• Support security incident response and SDLC compliance.

Skills

RMF methodology

JSIG guidelines

Security assessment

Policy oversight

Vulnerability assessment

Education

Bachelor’s degree or equivalent experience

Job description

Targeted Solutions, LLC is seeking a Security Control Accessor II to perform comprehensive assessments of management, operational, and technical security controls within information systems. The role ensures controls are implemented correctly, operating as intended, and meeting security requirements.

Responsibilities include RMF-based assessments, JSIG guidance, advising key stakeholders, and documenting results in SARs and POA&Ms while supporting security incidents and SDLC compliance.