Security Control Assessor (SCA)
Core
Conduct comprehensive assessments of management, operational, and technical security controls within Information Systems (IS) to determine effectiveness, identify weaknesses, and recommend corrective actions for national security missions.
Role type
Senior Security Control Assessor (SCA)
Builds
Security Assessment Reports (SAR), Plans of Action and Milestones (POA&M), and authorization packages for classified systems.
Domain
US Department of Defense (DoD) National Security / Classified Information Systems
Deliverable
client delivery
Required skills
Risk Management Framework (RMF) assessment, Joint Special Access Program (JSIG) implementation, Security Assessment Report (SAR) generation, Plan of Action and Milestones (POA&M) initiation, authorization package evaluation, threat and vulnerability analysis, security policy oversight, hardware/software security impact evaluation, Continuous Monitoring Plan assessment
Preferred skills
Multi-system portfolio management, Government compliance inspection support, security incident response coordination
Technologies
RMF, JSIG, NIST 800-53, ICD 503, DoDI 8510.01
Responsibilities
Perform oversight of IS security program policy development and implementation; Assess ISs based on RMF methodology in accordance with JSIG; Advise Information System Owners and Authorizing Officials on assessment and authorization issues; Evaluate authorization packages and make recommendations for authorization; Initiate POA&Ms with identified weaknesses based on SAR findings; Review and concur with sanitization and clearing procedures; Assist Government with security incidents and compliance inspections.
Seniority
Senior, hands-on IC with strategic advisory responsibilities