System High

Security Control Assessor IV (SCA)

Posted 6 Days Ago

Be an Early Applicant

90245, El Segundo, CA, USA

In-Office

170K-175K Annually

Entry level

Aerospace

The Role

Provides cybersecurity Assessment and Authorization support for government and contractor information systems, including classified and SCI environments. Reviews systems for compliance, conducts site assessments, evaluates security controls, supports authorization recommendations, prepares security documentation and reports, tracks assessment status, and advises government and industry stakeholders. Requires coordination across multiple large-scale programs, risk management expertise, technical writing, leadership, and familiarity with information security directives and government systems.

Summary Generated by Built In

Position Overview

The Security Control Assessor (SCA) provides information security Assessment and Authorization (A&A) support throughout a CUSTOMER’S program’s lifecycle to Contractor and Government facilities processing CUSTOMER’S information. SCAs enhance the Information System (IS) security awareness of Directorates' & Offices' staffs, ensure that proper IS security resources are appropriately applied, and act as an IS liaison between the Directorates & Offices and OS&CI.

The SCA Level duties include, but are not limited to the following:

The SCA shall review information systems for compliance with applicable DCID, ICD, and CUSTOMER’S directives and guidance, and make recommendations to the USG.
Provide IS security advice and guidance in accordance with applicable DCID, ICD, and CUSTOMER’S directives and guidance to Government and industry partners for the protection of data at all classification levels including SCI.
Provide IS technical guidance and support in preparing responses for USG approval to A&A questions asked by Government and industry partners.
Evaluate and recommend approval, disapproval, or waiver(s) for IS processing national security data at industry and/or Government facilities.
Support CUSTOMER’S Security’s development and implementation of directives and guidance for CUSTOMER’S Information Assurance, Information Technology, and Information Management policies.
Provide input to CUSTOMERS for consideration in the promulgation of future CUSTOMER’S IS security policy.
Support and/or conduct site visits and assessments to inspect and verify IS reports and plans at industrial and Government locations as approved by the cognizant COTR or site Government Point of Contact (GPOC) and provide a written report for review and approval by the Government.
Prepare reports and memoranda, to include, but not limited to: Memoranda for the Record (MFR), Memoranda of Agreement (MOA), Authorization to Proceed, and status and technical briefs for review and approval by the Government.
Update data and maintain Government-provided databases with current information about Government and industry IS status and representative contact information.
Prepare, review, and record notification and status messages to indicate A&A state of systems to system owner or programs in a format approved by the Government.
The contractor shall ensure that appropriate IS security requirements including applicable DCID, ICD, and CUSTOMER’S directives and guidance are addressed and applied and that appropriate documentation is prepared by the system owners or programs. The documentation will be contained in the Security Assessment Package, including, but not limited to the Concept of Operations (CONOPS) Plan, System Security Plans, System Requirements Traceability Matrix, Risk Management Matrix, Test Results, interface control documents, requests for changes, test plans, and other related program security documentation.
Track completion of the Security Assessment Report (SAR).
Support the preparation of the SAR, including, but not limited to, the Summary of Assessment results and Authorization Recommendation.
Review, coordinate, and respond to IS security issues as requested by the Government.
Perform short term (less than 90 days) CONUS and OCONUS travel to conduct site security inspections when approved by the COTR.
Provide A&A support to the Government for the protection of special programs and tactical operations related activities.
The contractor shall ensure these documents are reported via the Data Accession List (CDRL A008)

Qualifications

Required Skills (Knowledge, Skills, Abilities)

Ability to simultaneously manage and track multiple large-scale systems or programs involved in the A&A process.
Experience developing and implementing security related directives and guidance for Information Assurance, Information Technology, and Information Management.
In-Depth Technical understanding of information technology systems, software, and networks.
Effective technical report and general correspondence writing ability.
Ability to manage and track systems or programs involved in the A&A process.
Experience developing and implementing security related directives and guidance for Information Assurance, Information Technology, and Information Management; and
Experience working with a mixed skill level team to ensure that appropriate knowledge and skill transfer occurs.
Practical experience performing information systems assessment and authorization (A&A) as defined in applicable ICDs and guidance.
Practical experience performing the processes involved in developing and implementing security related directives and guidance for Information Assurance, Information Technology, and Information Management.
Practical experience utilizing risk management strategies for information technology solutions.
Technical understanding of emerging technologies and their implementation within Government system and network environments.
Knowledge of information technology concepts used in the evaluation of security performance and integrity of state-of-the-art applications, communications systems, hardware, software, satellite control systems, and information processing systems.
Technical understanding of information technology systems, software, and networks.
Ability to effectively coordinate A&A activities of industry and Government information systems to meet acquisition milestone requirements; and
Effective technical report and general correspondence writing ability.
Strong leadership skills and the ability to develop/lead a high performing team focused on the customer’s mission
Strong business acumen with analytical / metrics capabilities.
Must have the ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel and industry partners
Proficiency with MS Office Suite (MS Word, Excel, PowerPoint and Outlook)

Professional & Cultural Characteristics

Available to work before/after typical office hours
Credible and savvy business professional who is seen as a trusted advisor and functional expert to senior management.
Proactive and assertive professional who leads by example.
Leads with humility and is able to engender trust and respect quickly with a reputation for their willingness and ability to roll-up sleeves to get things done.
Vibrant, high-energy, and performance-driven individual who possesses the fortitude to address challenging scenarios.
Continuous learner who is always seeking to improve and constantly evaluating industry thought leadership.
A high achiever and independent self-starter with an exceptional track record of success who wants to be with a company that believes that people and culture are its greatest asset.

Required Certification

Appropriate IAM III Certification (CISSP, CISM)

Desired Skills (Knowledge, Skills, Abilities)

Education relevant to computer engineering, information security, information management, and/or computer science; and
Experience in technical project management.

Travel

Must be willing to travel short term (less than (90 days)

Additional Information

This job description is not designed to cover or contain all job duties required of the employee. There may be additional activities, duties and/or responsibilities that are required for this position that are not listed in this job description.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

System High is a Military friendly employer. Our extensive work on behalf of the U.S. government offers those who have served in uniform an opportunity to continue to serve their country in a new and exciting way while enjoying a successful civilian career.

System High values the power and strength of diverse backgrounds on the culture and performance of our company. We strive to maintain an inclusive culture to encourage each employee to bring their whole self to the mission.
System High Corporation is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status, or any other characteristic protected by law. We are proud to be an equal opportunity workplace.
If you require a reasonable accommodation to apply for a position with us, please email [email protected].
Legal notices can be viewed on the following PDFs: Know Your Rights: Workplace Discrimination is Illegal; EPPA Notice; FMLA Notice

Warning: Beware of recruitment scams: System High will never request money or personal purchases during the hiring process. Verify all communications come from a systemhigh.com or msg.paycomonline.com email address.

Skills Required

Ability to manage and track multiple large-scale systems or programs through the Assessment and Authorization process
Experience developing and implementing security directives and guidance for Information Assurance, Information Technology, and Information Management
In-depth technical understanding of information technology systems, software, and networks
Practical experience performing information systems assessment and authorization processes
Practical experience utilizing risk management strategies for information technology solutions
Experience coordinating government and industry information system A&A activities
Effective technical report and general correspondence writing ability
Strong leadership skills and ability to lead high-performing teams
Ability to work with Department of Defense, military, civilian, and industry personnel
Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, and Outlook
IAM III certification, such as CISSP or CISM
Education relevant to computer engineering, information security, information management, or computer science
Experience in technical project management
Willingness to work before or after typical office hours
Willingness to travel short term for CONUS and OCONUS site inspections