Security Control Assessor

2 months ago

Triangle, United States Sedulous Consulting Services LLC Full time
Job DescriptionJob Description

The Level II Information Assurance (IT Security Specialist) will play a critical role in supporting the Cybersecurity and Infrastructure Security Agency (CISA) by conducting comprehensive Security Control Assessments (SCAs) of CISA's information systems. The primary objective is to identify, assess, and report on the security weaknesses and deficiencies within these systems, and to provide actionable recommendations for remediation.

Key Responsibilities:

  • Conduct SCAs for CISA's information systems to evaluate the effectiveness of security controls.
  • Initiate and lead system assessment kick-off meetings with system stakeholders.
  • Perform thorough testing and analysis of controls, vulnerabilities, and configuration management.
  • Document findings in Security Assessment Reports (SARs), recommending corrective actions.
  • Incorporate results from previous risk assessments, penetration tests, and vulnerability reports into the SARs.
  • Ensure SCAs meet the Risk Management Framework (RMF) timelines set by the government.
  • Develop and execute Security Assessment Plans (SAP) in line with DHS standards.
  • Perform independent security control assessments following NIST 800-53A, FedRAMP, and DHS standards.
  • Create executive summary reports and present findings to system stakeholders and executive leadership.
  • Provide detailed risk analysis and residual risk reports (RRR) from the DHS Information Assurance Compliance System.
  • Develop standardized control implementation language for CISA systems.
  • Reassess failed controls as required and support the federal lead in preparing reports and presentations.
  • Innovate and improve the assessment and authorization process to enhance security delivery.
  • Contribute to the development and maintenance of common control programs and minimum-security control baselines.
  • Maintain internal Standard Operating Procedures (SOP) for security assessments and support systems under Ongoing Authorization (OA).

Qualifications:

  • Minimum of eight (8) years of experience in IT security, specifically in information assurance and security control assessments.
  • Demonstrated experience with NIST 800-53A and DHS security standards.
  • Strong understanding of risk management and security assessment methodologies.
  • Excellent analytical, documentation, and communication skills.
  • Ability to present complex security findings to both technical and non-technical audiences.
  • Proven ability to innovate and improve processes within a security assessment context.
  • Experience working with DHS Information Assurance Compliance System or similar tools.

Preferred Qualifications:

  • Certified Information Systems Security Professional (CISSP) or equivalent certification.
  • Certified in Risk and Information Systems Control (CRISC) or equivalent certification.
  • Previous experience working with federal agencies utilizing Cloud Service Providers (CSP).

Sedulous is an equal opportunity employer and Vietnam Era Veterans Readjustment Assistance Act (VEVRAA) federal contractor. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity, protected veteran status, status as a qualified individual with a disability, or any other category protected by law. Infinity hires and promotes individuals solely on the basis of their qualifications for the job to be filled. Should an applicant require reasonable accommodations, please reach out to Sedulous.

  • IT Security Assurance Expert

    1 week ago

    Triangle, Virginia, United States Sedulous Consulting Services LLC Full time

    Job SummarySedulous Consulting Services LLC is seeking a highly skilled Security Control Specialist to join our team. As a key member of our cybersecurity team, you will play a critical role in supporting our clients by conducting comprehensive security control assessments of their information systems.Key Responsibilities:Conduct thorough security control...

  • Acquisition Systems Engineer

    2 weeks ago

    Triangle, United States ManTech Full time

    Secure our Nation, Ignite your Future ManTech is seeking a Systems Engineer to join our team supporting our growing Marine Corps programs in Quantico, VA. The Senior Systems Engineer will support PM-ICO in research and development, acquisition, and sustainment of innovative tactical intelligence collection, processing, and dissemination equipment as well as...

  • Assembly Specialist

    4 days ago

    Golden Triangle, United States Velocity Solutions Full time

    About the RoleWe are seeking a skilled Assembly Specialist to join our team at Velocity Solutions. As an Assembly Specialist, you will play a critical role in the assembly and testing of complex flight control products.Key ResponsibilitiesAssemble and functionally test complex complete devicesAssemble electromechanical actuators, including electrical...

  • Electrical Engineer

    6 days ago

    Triangle Township, United States SST Direct Full time

    Job OverviewSST Direct is seeking an experienced Electrical Engineer to join our team as a technical authority in electrical utilities and distribution, fire and security systems, and other electrical/electronic systems.Key Responsibilities:Provide technical expertise and guidance on electrical engineering activities and projects.Direct, review, coordinate,...

  • Electrical Engineer

    2 months ago

    Triangle Township, United States SST Direct Full time

    Job DescriptionJob DescriptionSeeking an Electrical Engineer for a direct hire opportunity with our client in Research Triangle Park, NC.This position offers full benefits including PTO, Medical, Dental and 401k! Salary is starting at $107,906 annuallyResponsibilities:Serve as a technical authority in electrical utilities and distribution, fire and security...

  • Clinical Supply Operations Manager

    3 weeks ago

    Triangle Township, United States Biogen Full time

    Job DescriptionJob DescriptionJob DescriptionAbout This RoleThe Global Clinical Supply Chain (GCSC) is looking to hire a Clinical Supply Operations Manager to assure a high level of compliance and effectiveness for GCSCs operations. GCSC’s goal is to deliver medicines across the world to all patients enrolled in Biogen’s Clinical Studies. The...

  • Greenhouse Specialist

    2 months ago

    Research Triangle Park, United States BASF SE Full time

    Now hiring Greenhouse Specialist Research Triangle Park, NC We are looking for a Greenhouse Specialist to join our Agriculture Solutions team in Research Triangle Park, NC. Come create chemistry with us BASF's Agricultural Solutions division connects innovation, customers, partners and agricultural experts and integrates sustainability criteria into all...

  • Regulatory Performance/Finance Group Lead

    1 week ago

    Research Triangle Park, United States BASF SE Full time

    Now hiring! Regulatory Performance/Finance Group Lead We are looking for a Regulatory Performance/Finance Group Lead to join our Agricultural Solutions team in Research Triangle Park, NC.   Come create chemistry with us! BASF’s Agricultural Solutions division connects innovation, customers, partners and agricultural experts and integrates...

  • Regulatory Label Specialist

    2 weeks ago

    Research Triangle Park, United States BASF SE Full time

    Now hiring! Regulatory Label Specialist We are looking for a Regulatory Label Specialist to join our Agricultural Solutions team in Research Triangle Park, NC.              This position offers a hybrid working arrangement - 3 days working in the office and 2 days working remotely from home each week. Domestic relocation assistance available, if...

  • Clinical Supply Operations Manager

    6 days ago

    Research Triangle Park, United States Biogen Full time

    About This Role The Global Clinical Supply Chain (GCSC) is looking to hire a Clinical Supply Operations Manager to assure a high level of compliance and effectiveness for GCSCs operations. GCSC’s goal is to deliver medicines across the world to all patients enrolled in Biogen’s Clinical Studies. The function’s responsibilities include the production...

  • Global Seeds Quality

    2 months ago

    Research Triangle Park, United States BASF SE Full time

    Now hiring Global Seeds Quality & Continuous Improvement Manager - RTP, NC We are looking for a Global Seeds Quality & Continuous Improvement Manager to join our Agricultural Solutions team in Research Triangle Park, NC. Come create chemistry with usWe are seeking a professional like you to join our team. In this role, You will be responsible for...

  • Global Seeds Quality

    2 months ago

    Research Triangle Park, United States BASF SE Full time

    Now hiring! Global Seeds Quality & Continuous Improvement Manager - RTP, NC   We are looking for a Global Seeds Quality & Continuous Improvement Manager to join our Agricultural Solutions team in Research Triangle Park, NC.   Come create chemistry with us! We are seeking a professional like you to join our team. In this role, You will be responsible...

  • Project Manager

    1 month ago

    Research Triangle Park, United States BASF SE Full time

    Now Hiring Project Manager / Facility Engineer Research Triangle Park, NC The world needs creative solutions. We need YOU Where the chemistry happens...We are seeking a motivated professional like you to provide detailed engineering expertise in support of site capital projects and operational reliability. In this role, you will collaborate closely with...

  • Project Manager

    1 month ago

    Research Triangle Park, United States BASF SE Full time

    Now Hiring! Project Manager / Facility Engineer   Research Triangle Park, NC   The world needs creative solutions. We need YOU!   Where the chemistry happens… We are seeking a motivated professional like you to provide detailed engineering expertise in support of site capital projects and operational reliability. In this role, you will collaborate...