Position Title: Senior Security Control Assessor Position Type:On-Site Position Location:Denver, CO Clearance:Active TS/SC w/ CI Poly
The Senior Security Control Assessor (SCA) role demands extensive expertise and leadership in ensuring the security and integrity of NRO programs through diligent assessment and authorization practices.
Responsibilities:
Provide expert information security Assessment and Authorization (A&A) support throughout the lifecycle of NRO programs.
Collaborate effectively with Contractor and Government systems processing NRO information to ensure compliance with rigorous security standards and protocols.
Review and recommend vulnerability and risk levels associated with software and hardware products.
Provide advanced IA support to SCA Level 2 – 4 personnel in conducting assessment actions.
Coordinate with the Contracting Officer (CO) and Contracting Officer's Technical Representative (COTR) for proposed personnel who do not meet desired qualifications.
Perform information systems A&A as defined in applicable Intelligence Community Directives (ICDs) and guidance.
Develop and implement security-related directives and guidance for IA/IT/IM.
Utilize advanced risk management strategies for information technology solutions.
Stay abreast of emerging technologies and their implementation within Government system and network environments.
Apply in-depth knowledge of information technology concepts in evaluating security performance and integrity.
Coordinate A&A activities of industry and Government information systems to meet acquisition milestone requirements effectively.
Demonstrate proficiency in technical report and general correspondence writing.
Requirements:
Bachelor's Degree with 5 years of relevant experience, OR High School or Associate's Degree with 7 years, OR Master’s Degree or higher with 3 years.
Education relevant to computer engineering, information security, cyber security, information management, or computer science is desired.
Experience in technical project management is desired.
Practical experience performing information systems A&A as defined in applicable ICDs and guidance.
Practical experience developing and implementing security-related directives and guidance for IA/IT/IM.
Practical experience utilizing advanced risk management strategies for information technology solutions.
Understanding of emerging technologies and their implementation within Government system and network environments.
Knowledge of information technology concepts used in evaluating security performance and integrity.
Ability to effectively coordinate A&A activities of industry and Government information systems.
Compliant IAM Level II certification, plus:
Ability to manage and track systems or programs involved in the A&A process.
Experience working with a mixed skill level team to ensure appropriate knowledge and skill transfer occurs.