Security Control Assessor I (Cybersecurity)

TL;DR

Security Control Assessor I (Cybersecurity): Conducting comprehensive assessments of management, operational, and technical security controls within Information Systems with an accent on Risk Management Framework (RMF) and JSIG methodologies. Focus on evaluating authorization packages, identifying vulnerabilities, and recommending corrective actions for SCI and SAP activities.

Location: Onsite in Ramstein, Germany

Salary: $107,744 - $137,425

Company

A global technology and professional services company delivering mission services to the U.S. government, defense, and intelligence community.

What you will do

• Conduct comprehensive assessments of management, operational, and technical security controls to determine their overall effectiveness.
• Perform IS assessments using RMF methodology in accordance with the Joint Special Access Program (SAP) Implementation Guide (JSIG).
• Advise system owners and authorizing officials on assessment and authorization issues.
• Evaluate threats and vulnerabilities to determine if additional safeguards are required.
• Prepare Security Assessment Reports (SAR) and initiate Plans of Action and Milestones (POA&M).
• Evaluate hardware and software security impacts on authorization boundaries and monitor implementation of Continuous Monitoring Plans.

Requirements

• U.S. Citizenship Required.
• Active TS/SCI clearance and willingness to submit to a CI polygraph.
• 5+ years of related experience, including at least 3 years in SAP, SCI, or Collateral IS Security.
• Certification: IAT Level 3 (e.g., CISSP, CASP+ CE, CISA) or IAM Level 1.
• Bachelor's degree in a related discipline (or equivalent experience).
• Prior experience in the role of ISSO and ISSM.

Nice to have

• Experience with Special Access Programs (SAP).

Culture & Benefits

• Support for critical national defense operations on a global scale.
• Total rewards program that may include international allowances and premium uplifts for OCONUS assignments.
• Opportunity to work with advanced technology in digital modernization, cloud, and cyber.
• Comprehensive benefits package including health and retirement programs.