Security Control Assessor (SCA) Level 3
Position Overview:
System High requires SCAs to provide Information Security Assessment and Authorization (A&A) support throughout a program's lifecycle to both Contractor and Government systems.
Duties & Responsibilities (but not limited to)
-
Familiarity with Information Assurance (IA) concepts and possess moderate Information Security (IS) skills and knowledge
-
Ability to review and recommend vulnerability and risk levels associated with software (SW) and hardware (HW) products
-
Practical experience performing Information System (IS) A&A as defined in applicable Intelligence Community Directives (ICD) and guidance
-
Practical experience developing and implementing security related directives and guidance for Information Technology (IT), Information Assurance (IA), and Information Management (IM)
-
Practical experience utilizing risk management strategies for IT solutions
-
Understanding of emerging technologies and their implementation within Government system and network environments
-
Knowledge of IT concepts used in the evaluation of security performance and integrity of state-ofthe-art applications, communications systems, HW, SW, satellite control systems, and information processing systems
-
Understanding of IT systems, SW, and networks
-
Practical experience assessing security of cloud-based systems, including infrastructure as a service (IaaS), platform as a service (PaaS), and/or software as a service (SaaS) deployment
-
Ability to effectively coordinate A&A activities of industry and Government ISs to meet acquisition milestone requirements
-
Ability to write effective technical reports and general correspondence
-
Ability to manage and track systems or programs involved in the A&A process
-
Experience developing and implementing security related directives and guidance for IT, IA, and IM
-
Experience working with a mixed skill level team to ensure that appropriate knowledge and skill transfer occurs