Senior Security Control Assessor TS/SCI

General Dynamics - IT; Bedford (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

General Dynamics - IT is seeking a Senior Security Control Assessor (SCA) to conduct comprehensive assessments of IS security controls, including SAP, SCI, and collateral environments, within the customer’s area of responsibility. The role requires strong RMF/Government regulatory experience and collaboration with ISO, PSO, and AO/DAO to drive authorization and remediation actions.

The candidate will oversee policy development, risk assessments and POA&M creation, ensuring accurate SARs and

Qualifications

• 7+ years related experience in IS security roles.
• Prior performance as ISSO/ISSM or SCA is required.
• Minimum four years in SAP, SCI or Collateral IS security.

Responsibilities

• Oversee development, implementation and evaluation of IS security program policy, including SAP network integration.
• Assess ISs using RMF per JSIG guidance.
• Advise ISO, IDO, PSO, and AO/DAO on assessment issues.
• Evaluate authorization packages and recommend authorization.
• Determine threats and vulnerabilities and recommend safeguards.
• Advise on impact levels for C/I/A.
• Prepare SAR for Authorization boundary.
• Initiate POA&M for weaknesses.
• Provide written recommendations for security authorization.
• Discuss authorization and submit package to AO/DAO.
• Review changes to authorization boundaries and environment.
• Concur with sanitizations per gov policy.
• Assist government compliance inspections and security incidents.
• Ensure SDLC phases addressed.
• Evaluate hardware/software security impact.
• Evaluate effectiveness of Continuous Monitoring plans.
• Represent the customer on inspection teams.

Skills

ISSO/ISSM

Security assessment

RMF methodology

JSIG

Cybersecurity policy

Education

Bachelor’s degree

Assoc degree + 2 yrs

Equivalent experience

Job description

General Dynamics - IT is seeking a Senior Security Control Assessor (SCA) to conduct comprehensive assessments of IS security controls, including SAP, SCI, and collateral environments, within the customer’s area of responsibility. The role requires strong RMF/Government regulatory experience and collaboration with ISO, PSO, and AO/DAO to drive authorization and remediation actions.

The candidate will oversee policy development, risk assessments and POA&M creation, ensuring accurate SARs and