Senior Security Control Assessor Representative (SCAR)
Core
Senior Security Control Assessor Representative evaluating IT infrastructure risks, assessing system compliance with RMF/NIST/DoD requirements, and validating security controls for authorization.
Role type
Senior IC security control assessor (RMF/ATO)
Builds
Security authorization packages and compliance artifacts for DoD/DAF IT systems
Domain
Defense / Cybersecurity / Risk Management
Required skills
RMF process execution, NIST SP 800-53 Rev 5 compliance, STIG assessment, cloud security (AWS/Azure/GCP), eMASS/Xacta proficiency, Air Force risk management policies, POA&M management, control gap analysis, technical writing for senior leadership
Preferred skills
Fast Track ATO Handbook, AF Continuous ATO Playbook, CI/CD pipelines, DevSecOps, JIRA/Confluence/SharePoint
Technologies
AWS, Azure, GCP, eMASS, Xacta, JIRA, Confluence, SharePoint, CI/CD
Responsibilities
Evaluate IT infrastructure risks and determine artifacts for Federal/DoD/DAF requirements; Assess IT systems for compliance with RMF and NIST frameworks; Gather, review, and verify business processes and control effectiveness; Review risk matrices, testing plans, and POA&Ms; Develop conclusions on internal controls and recommend policy improvements; Conduct risk/vulnerability assessments; Provide reports to Authorizing Officials and CISOs; Review network/system designs for security accuracy.
Seniority
Senior, hands-on IC
