Security Control Assessor

4 weeks ago

Arlington, United States MAXIMUS, Inc. Full time

Description & Requirements

Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA.

The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an SAP information system to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system).

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS040, T4, Band 7

What you will do:

* Monitor and evaluate system compliance with information technology (IT) security, resilience, and dependability requirements
* Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy
* Experience with assessing cloud-based security authorizations (FedRamp, AWS & Azure) as well as the NIST control responsibilities
* Verify that application software/network/system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations
* Draft Security Assessment Reports (SAR) based on the findings from the system assessment
* Provide expert security advice and recommendations to manage identified risks
* Evaluate and assess network security configurations and recommend corrective actions to mitigate identified deficiencies

Required Skills:

* Candidates must possess an active TS/SCI clearance
* A Bachelor's degree is required for this position. 4 years of relevant work experience may be considered in lieu of the degree requirement. An Associate's degree and 2 years of relevant work experience may also be considered in lieu of the degree requirement
* 7+ years of experience working with Risk Management Framework (RMF).
* 7+ years of experience as a cyber security assessor and/or ISSO
* Must meet 8140 baseline certification requirements (CISSP, CCNA, CySA+, GISCP, Sec+CE, CND, SSCP etc.)
* 7+ years of experience with the following tools: SCAP, ACAS, Vulnerator, HBSS, eMASS
* Excellent written and verbal communication skills
* 7+ years of experience understanding DISA STIG Security configuration baselines.

Desired Skills:

* Knowledge and experience performing network security vulnerability assessments

#clearance #techjobs #SAPCIO

Minimum Requirements

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS040, T4, Band 7

EEO Statement

Active military service members, their spouses, and veteran candidates often embody the core competencies Maximus deems essential, and bring a resiliency and dependability that greatly enhances our workforce. We recognize your unique skills and experiences, and want to provide you with a career path that allows you to continue making a difference for our country. We're proud of our connections to organizations dedicated to serving veterans and their families. If you are transitioning from military to civilian life, have prior service, are a retired veteran or a member of the National Guard or Reserves, or a spouse of an active military service member, we have challenging and rewarding career opportunities available for you. A committed and diverse workforce is our most important resource. Maximus is an Affirmative Action/Equal Opportunity Employer. Maximus provides equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disabled status.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

  • Security Control Assessor

    2 months ago

    Arlington, United States Maximus, Inc. Full time

    Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA. The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls Assessor, Control, Information Technology, Security, Network Security, Controls, Manufacturing

  • Security Control Assessor

    2 weeks ago

    Arlington, United States Maximus Services, LLC Full time

    **Description & Requirements** Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA. The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an SAP information system to determine the...

  • Security Control Assessor

    5 days ago

    Arlington, Virginia, United States Zermount Inc Full time

    Security Control Assessor Team Lead:MILITARY FRIENDLY & PREFERRED - HOH SPONSOR:SummaryZermount Inc. is seeking a Security Control Assessor Team Lead who will play a vital role in leading multiple teams on large projects. The System Security Assessment Team Lead will oversee all aspects of the Assessment Team ensuring the performance of complex risk...

  • Security Control Assessor

    3 days ago

    Arlington, United States Maximus Services, LLC Full time

    **Description & Requirements** Maximus is searching for a Security Control Assessor (SCA) to join a DoD program in Arlington, VA. The Security Control Assessor is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an SAP information system to determine the...

  • Security Control Assessor

    5 days ago

    Arlington, United States Zermount Inc Full time

    **Security Control Assessor Team Lead**: **MILITARY FRIENDLY & PREFERRED - HOH SPONSOR**: **Summary** Zermount Inc. is seeking a Security Control Assessor Team Lead who will play a vital role in leading multiple teams on large projects. The System Security Assessment Team Lead will oversee all aspects of the Assessment Team ensuring the performance of...

  • Security Control Assessor

    4 weeks ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob Description Security Control Assessor Team Lead MILITARY FRIENDLY & PREFERRED - HOH SPONSORSummaryZermount Inc. is seeking a Security Control Assessor Team Lead who will play a vital role in leading multiple teams on large projects. The System Security Assessment Team Lead will oversee all aspects of the Assessment Team ensuring the...

  • Security Control Assessor

    2 weeks ago

    Arlington, United States System High Corporation Full time

    **Position Overview** The Security Control Assessor must fulfill a variety of cybersecurity functions, to include: System Administrator, Enterprise Oversight, certification and accreditation, SAP and SCI assessment and authorization (A&A), Platform Information Technology (PIT) assessment and authorization, Information Assurance and Technical Security for...

  • Security Control Assessor

    5 days ago

    Arlington, Virginia, United States Bluehawk Full time

    Overview BLUEHAWK, LLC is a professional services firm providing intelligence, information technology, language, and training services to the U.S. Government and commercial entities with objectives to protect and defend our nation, citizens, natural resources, critical Infrastructure, freedoms, and human rights. We are hiring creative, motivated talented...

  • Senior Security Control Assessor

    4 weeks ago

    Arlington, United States SecuriGence LLC Full time

    Job DescriptionJob DescriptionJob Title: Senior Security Control Assessor (SCA)Location: Arlington, VirginiaClearance Level: Top Secret ClearanceSummaryWe deliver essential technology services to our customers in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Senior Security...

  • Security Assessor

    2 months ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionSECURITY ASSESSOR - MID-LEVELMILITARY FRIENDLY & PREFERRED - HOH SPONSORAs a Mid Security Control Assessor, you will design, develop, engineer, and implement solutions. You will perform complex risk analyses which also include risk assessment. Establish and satisfy information assurance and security requirements based upon the...

  • SCA II

    4 weeks ago

    Arlington, United States Watermark Risk Management International Full time

    Job DescriptionJob DescriptionCome make your mark with Watermark!🎖️ FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business.🌎 SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements.⭐ OUR CORE VALUES drive every...

  • Risk Assessor

    2 months ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionSENIOR RISK ASSESSORMILITARY FRIENDLY & PREFERRED - HOH SPONSORThe Senior Risk Assessor's role is to design, develop, engineer, and implement solutions. Perform complex risk analyses which also include risk assessment. This position will also establish and satisfy information assurance and security requirements based upon...

  • Risk Assessor

    7 days ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionSENIOR RISK ASSESSORMILITARY FRIENDLY & PREFERRED - HOH SPONSORThe Senior Risk Assessor's role is to design, develop, engineer, and implement solutions. Perform complex risk analyses which also include risk assessment. This position will also establish and satisfy information assurance and security requirements based upon...

  • Risk Assessor

    3 weeks ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionSENIOR RISK ASSESSORMILITARY FRIENDLY & PREFERRED - HOH SPONSORThe Senior Risk Assessor's role is to design, develop, engineer, and implement solutions. Perform complex risk analyses which also include risk assessment. This position will also establish and satisfy information assurance and security requirements based upon...

  • Assessor

    4 weeks ago

    Arlington, United States ARM Consulting Full time

    Job DescriptionJob DescriptionSalary: Company: ARM Consulting                                      Position Title: AssessorPosition Category: Full TimeLocation: Rockville, Maryland (Remote Work)ARM Consulting (ARM) is a management and technology company that integrates a range of capabilities to assist government and...

  • Assessor

    3 weeks ago

    Arlington, United States ARM Consulting Full time

    Job DescriptionJob DescriptionSalary: Company: ARM Consulting                                      Position Title: AssessorPosition Category: Full TimeLocation: Rockville, Maryland (Remote Work)ARM Consulting (ARM) is a management and technology company that integrates a range of capabilities to assist government and...

  • Cyber Risk Assessor

    6 days ago

    Arlington, United States Booz Allen Hamilton Full time

    Warnings about cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this cyber noise, how can these organizations understand their risks an Risk, Assessor, Cybersecurity, Security Analyst, Technology, Information, Cyber

  • Zero Trust Senior Auditor

    3 weeks ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST SENIOR Auditor (assessor)MILITARY FRIENDLY & PREFERRED - HOH SPONSORZermount Inc. is seeking a Zero Trust (ZT) Senior Auditor (Assessor) who will be responsible for the oversight, development, and execution of assessments of our client's enterprise and systems to determine the compliance with ZT principles. The ZT...

  • Zero Trust Senior Auditor

    2 months ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST SENIOR Auditor (assessor)MILITARY FRIENDLY & PREFERRED - HOH SPONSORZermount Inc. is seeking a Zero Trust (ZT) Senior Auditor (Assessor) who will be responsible for the oversight, development, and execution of assessments of our client's enterprise and systems to determine the compliance with ZT principles. The ZT...

  • Zero Trust Senior Auditor

    3 weeks ago

    Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST SENIOR Auditor (assessor)MILITARY FRIENDLY & PREFERRED - HOH SPONSORZermount Inc. is seeking a Zero Trust (ZT) Senior Auditor (Assessor) who will be responsible for the oversight, development, and execution of assessments of our client's enterprise and systems to determine the compliance with ZT principles. The ZT...