Security Control Accessor

Location: Montgomery, AL

Duration: Long Term

• The Security Control Assessor (SCA or SCAR) will assist the Medicaid ISO in assessing security policies, procedures, templates, standards, and guidelines.
• Perform third-party security assessments of security and privacy control implementations according to agency security policies, federal regulations, and industry standards.
• Interface with external audit teams during audits of Medicaid systems.

• Understanding of cybersecurity principles, frameworks such as NIST SP 800-53, and applicable legislation and regulations.
• Technical proficiency with operating systems, virtual machine environments, system hardening, and basic network concepts including firewalls, routers, switches, VPNs, and security protocols.
• Knowledge of risk assessment tools and methodologies, vulnerability identification, and threat analysis.
• Ability to develop and document security procedures in coordination with agency process owners.

• 2-3 years in systems and/or network support or administration, with experience in various operating systems, network configurations, and cloud environments.
• 1-2 years in cybersecurity, implementing and supporting security measures like firewalls, intrusion detection systems, encryption, SIEM tools, etc.

• 1-2 years in governance, risk, and compliance management, with knowledge of HIPAA, CMS, IRS, SSA regulations, and security frameworks like NIST SP 800-53.

• At least one cybersecurity industry certification, such as ISC2 CISSP, EC-Council CEH, or equivalent.

• Seniority Level: Mid-Senior level
• Employment Type: Contract
• Job Function: Information Technology
• Industry: Government Administration