Security Control Assessor
Core
Provide subject matter expertise to the Information System Security and Authorization program, including SA/OSA guidance, and review system artifacts for accuracy to support authorization to operate requests.
Role type
Senior IC security control assessor (federal compliance)
Builds
Risk Management Framework authorization packages and audit reports for customer and external partner systems
Domain
Federal government cybersecurity and privacy compliance
Required skills
CISSP certification, computer security incident response, enterprise Linux and Windows administration, Active Directory, cyber threat intelligence, advanced malware analysis, reverse engineering, disassembly, FISMA Management Tool usage, Privacy Impact Assessments, System Security Plans, Risk Management Framework, POA&M reports
Preferred skills
Active Secret or Top Secret security clearance, High Risk Public Trust clearance eligibility
Technologies
Active Directory, Linux, Windows
Responsibilities
Develop and provide guidance on program standards, policies, and procedures; Review system artifacts for accuracy and completeness in support of authorization to operate requests; Review, create, or update Risk Management Framework authorization packages; Ensure assessment and audit reports are properly uploaded to the FISMA Management Tool (CSAM); Audit closed Plans of Actions and Milestones for completeness and compliance; Conduct lessons-learned sessions and develop best practices.
