Security Control Assessor Representative (SCAR)
Core
Independently assess management, operational, privacy, and technical security controls for over 40 enterprise programs of record to support mission assurance for cyber USTRANSCOM terrain systems.
Role type
Senior IC security control assessor
Builds
Authorization packages, risk assessments, and compliance documentation for Government review
Domain
US Department of Defense (DoD) Cybersecurity / Information Assurance
Required skills
DoD Risk Management Framework (RMF) expertise, eMASS tool proficiency, security control assessment, risk analysis, authorization process management, artifact quality review, NIPRNet/SIPRNet verification, user account management
Preferred skills
Ports, Protocols, and Services Management (PPSM) experience
Technologies
eMASS, NIPRNet, SIPRNet, RMF Artifact Quality Rubric
Responsibilities
Assess security controls and enhancements for enterprise programs; collect and maintain authorization documentation; analyze technical artifacts and provide risk recommendations; triage authorization requests and POA&Ms; identify non-compliant submissions and prepare Package Return Reports; verify control implementation on NIPRNet and SIPRNet; compile Authorization Official packages; coordinate RMF packages for approval; manage customer eMASS user accounts; track checklists from submission to approval.
Seniority
Mid-Senior, hands-on IC
