Security Control Assessor, Liaison

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Facilitate effective communication among security control assessors, system stakeholders, and various teams.

• Assist in the planning and execution of security control assessments.

• Coordinate the assessment scope, test plans, and related activities with the SCA team lead.

• Prepare, review, and maintain security documentation in compliance with DoD and federal cybersecurity requirements.

• Analyze security vulnerabilities and weaknesses.

• Support the development of mitigation strategies and Plans of Action and Milestones (POA&Ms).

• Aid in Assessment and Authorization (A&A) activities throughout the Risk Management Framework (RMF) lifecycle.

• Ensure that security policies, controls, standards, and resources are comprehended and applied correctly.

• Collaborate with system owners, assessment teams, authorizing officials, and other stakeholders.

• Facilitate effective assessment activities and the resolution of findings.

• Perform additional related tasks as assigned to support the evolving needs of the company and its clients.

⛳️ Requirements

• Must possess or be able to obtain a Department of Defense (DoD) Secret Clearance.

• U.S. citizenship is required, along with meeting the 13 adjudicative guidelines for security clearance.

• A minimum of 7 years of relevant experience in cybersecurity, network security, information assurance, or related fields.

• Experience as a Security Control Assessor or in a similar security assessment role, such as a Navy Qualified Validator.

• Proven experience in supporting security assessments and authorization activities within the Risk Management Framework (RMF).

• Hands-on experience with tools such as STIG Manager, eMASS, Nessus, eMASSTer, and Splunk.

• Must hold a CompTIA Security+ CE certification or an equivalent substitution: CompTIA Security X, CCNA Security, CSA+, GICSP, or SSCP.

• Strong understanding of RMF, including NIST SP 800-37 and NIST SP 800-53.

• Knowledge in vulnerability management, impact analysis/predisposing conditions, and security gap analysis.

• Familiarity with cybersecurity laws, regulations, and standards, such as NIST, FISMA, and DoD directives.

• Ability to analyze security assessment results, identify underlying causes, and propose risk-based mitigation strategies.

• Excellent written and verbal communication skills.

• Capability to convey technical findings and recommendations to both technical and non-technical audiences.

• Ability to collaborate effectively with system owners, assessment teams, authorizing officials, and other stakeholders.

• Must reside within a 6-hour driving distance from Mechanicsburg, Pennsylvania.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related IT field is preferred.

🏝️ Benefits

• Competitive salary.

• Discretionary bonuses.

• Comprehensive health benefits, including medical, dental, and vision insurance.

• Flexible Paid Time Off (PTO).

• Holidays.

• Opportunities for professional development and ongoing education.

• Hybrid/remote work arrangement with flexible hours.

• Flexible work schedules.

• 401(k) retirement plan with company matching.

• Employee recognition programs.

• Company events.

• Reasonable accommodations for individuals with disabilities.