Security Control Assessor; SCA II - West Lake, TX area

Job Qualifications

• Information Security Management
• Information Security Risk Management
• Information Security Standards
• Information System Security

• Cisco Certified Network Associate (CCNA)
• GIAC Security Essentials (GSEC)
• Global Industrial Cyber Security Professional Certification (GICSP)

3+ years of related experience in SAP, SCI, or Collateral Information Systems security, including prior performance as ISSO, ISSM, or SCA. 2+ years of SAP experience required.

Yes

Security Control Assessor (SCA) II – Evergreen

The Security Control Assessor (SCA) II conducts comprehensive assessments of management, operational, and technical security controls within or inherited by an information system (IS). The role evaluates effectiveness, identifies weaknesses, and recommends corrective actions to ensure compliance with security requirements.

• Oversee development, implementation, and evaluation of IS security program policy, integrating existing SAP network infrastructure.
• Perform assessments of ISs using the Risk Management Framework (RMF) methodology and the Joint Special Access Program (JSIG) guide.
• Advise IS Owners, Data Owners, Program Security Officers, and Delegated/Authorizing Officials on assessment and authorization issues.
• Evaluate authorization packages and recommend to the AO/DAO for authorization.
• Assess IS threats and vulnerabilities to determine required safeguards.
• Determine impact levels for confidentiality, integrity, and availability.
• Document assessment results, prepare the Security Assessment Report (SAR), and initiate Plan of Action and Milestones (POA&M).
• Provide written recommendations for security authorization to the Government.
• Review and concur with sanitization and clearing procedures per Government guidance.
• Assist with compliance inspections and cybersecurity incidents, ensuring corrective measures are taken.
• Ensure organization addresses all phases of the system development life cycle (SDLC).
• Evaluate hardware and software for security impact on authorization boundaries.
• Assess effectiveness of Continuous Monitoring Plans.
• Maintain knowledge of Information Systems, Network Appliances, and Cross-Domain Solutions (CDS).
• Assist with joint assessments of CDS with other DoD agencies.

• Must be able to lift 50 lbs regularly.
• Expert knowledge of DoD, National, and applicable agency security policies, manuals, and standards.
• Proficient in Microsoft Office (Word, PowerPoint, Excel).

• Bachelor’s degree in a related discipline.
• Associate’s degree in a related area plus two years of experience.
• Equivalent experience (four years).

• IAT Level III or IAM Level III (e.g., CISSP, CASP+, CE, CCNP Security, CISA).

• TS/SCI required.
• Must be able to obtain TS/SCI with CI Polygraph.

• Comprehensive benefits and wellness packages, including 401(k) with company match.
• Paid time off and vacation.
• Health, dental, vision plans, and disability benefits.
• Flexible work options for eligible employees.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans.