Senior Security Control Assessor

The role

The Senior Security Control Assessor will conduct comprehensive assessments of implemented controls and security requirements for the Department of Education. This role involves developing test plans, preparing security reports, and providing risk recommendations to improve enterprise security.

What you will do

• Establish and satisfy information assurance and security requirements.
• Conduct comprehensive assessments of implemented controls and enhancements.
• Schedule and lead System Assessments out-briefs with stakeholders.
• Prepare security, privacy, and supply chain assessment reports.
• Provide assessments of deficiency severity and recommend corrective actions.
• Develop and execute a comprehensive Security Controls Test plan.
• Create or update a 3-year OSA test plan for each system.
• Complete and maintain an OSA master project schedule.
• Create or update program management documentation.
• Ensure appropriate vulnerability and penetration tests are scheduled and conducted.

Required qualifications

• Bachelor’s degree or equivalent and at least ten (10) years related experience.
• Senior industry professional such as CISSP or equivalent required.
• At least five (5) years of experience as a Security Controls Assessor or similar audit findings response role.
• Excellent communications and interpersonal skills.
• Experience with security audits and compliance.
• Experience with IT Review Board change requests.
• Good familiarity with and understanding of all relevant government and agency policies and procedures including FedRAMP, RMF, FISMA, FIPS-II, NIST, etc.
• U.S. Citizenship is required.
• Must be able to obtain a High Risk Public Trust Security Clearance.

Nice to have

• Active Secret or Top Secret security clearance

Benefits

• Certification incentive program
• PTO
• Floating federal holiday options
• HMO and High Deductible plans with Health Savings Accounts [HSAs]
• Flex Spending Accounts [FSAs]
• Full Dental Plans
• Vision
• ST/LT Disability
• Life Insurance
• 401k matched

Before you apply

• This is a contingent position based upon contract win.
• U.S. Citizenship is required.
• Must be able to obtain a High Risk Public Trust Security Clearance.

About the company

SkyePoint Decisions is a cybersecurity, critical infrastructure, and IT service provider headquartered in Dulles, Virginia. They provide enterprise-wide solutions and targeted services for federal government clients.