Senior Security Controls Assessor (TS/SCI CI Poly #26-143)

Strategic Analysis, Inc.; Arlington (VA); Sur place; USD 120 000 - 180 000; Plein temps

Résumé du poste

Strategic Analysis, Inc. seeks an experienced Senior Security Control Assessor (SCA) to support RMF activities, including assessment, authorization, and continuous monitoring of DoD/IC information systems. You will evaluate security controls, identify risks, and support authorization decisions.

Responsibilities include assessing control effectiveness, conducting risk analysis, and delivering mitigation recommendations. Travel up to 50% and active TS/SCI w/ CI Poly are required.

Qualifications

• 7+ years of cybersecurity experience supporting RMF/A&A activities.
• Experience supporting SAP environments within DoD/IC.
• Background in SCA, ISSM, ISSO, or ISSE roles.
• Strong knowledge of RMF, NIST frameworks, and secure cloud/AI/ML environments.
• Experience with GRC/RMF tools such as XACTA, eMASS, or ServiceNow (SNOW).
• Bachelor's degree or higher in a relevant field.
• Active TS/SCI clearance with CI poly.

Responsabilités

• Assess the effectiveness of security controls in RMF
• Perform security reviews to identify gaps in system architecture and design
• Conduct risk analysis and develop mitigation recommendations
• Execute security authorization reviews and support ATO decisions
• Validate security posture of systems, networks, and applications
• Monitor and evaluate compliance across information systems
• Develop Statements of Risk (SORs) and document security findings
• Provide authorization recommendations to the Authorizing Official

Connaissances

SCA experience

RMF/A&A

Vulnerability analysis

Risk assessment

Formation

Bachelor's degree or higher

IAM Level III certification (CISM, CISSP, GSLC)

Outils

XACTA

eMASS

ServiceNow (SNOW)

SAP environments

Description du poste

We are seeking an experienced Senior Security Control Assessor (SCA) to support Risk Management Framework (RMF) activities, including assessment, authorization, and continuous monitoring of information systems. This role focuses on evaluating security controls, identifying risks, and supporting authorization decisions within DoD and/or IC environments.

Responsibilities

• Assess the effectiveness of security controls in accordance with RMF
• Perform security reviews to identify gaps in system architecture and design
• Conduct risk analysis and develop mitigation recommendations
• Execute security authorization reviews and support ATO decisions
• Validate security posture of systems, networks, and applications
• Monitor and evaluate compliance across information systems
• Develop Statements of Risk (SORs) and document security findings
• Provide authorization recommendations to the Authorizing Official (AO)

Qualifications & Requirements

• 7+ years of cybersecurity experience supporting RMF/A&A activities
• Experience supporting SAP environments within DoD/IC
• Previous experience in SCA, ISSM, ISSO, or ISSE roles
• Strong working knowledge of Secure Systems & Cloud/AI/ML Environments and NIST RMF
  frameworks in advanced R&D portfolios
• Experience with GRC/RMF tools such as XACTA, eMASS, or ServiceNow (SNOW)
• IAM Level III certification (CISM, CISSP, or GSLC)
• Ability to assess vulnerabilities, analyze risk, and document findings clearly
• Bachelor's Degree or higher in a relevant field
  

Preferred

• Knowledge of FedRAMP and cloud security requirements
• Familiarity with STIGs, SRGs, and continuous monitoring practices

Travel: Up to 50% travel required during the first year.

Clearance

• Active TS/SCI w/ CI Poly