FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Security Control Assessor
SkyePoint Decisions, Inc.. Establish and satisfy information assurance and security requirements based on user, policy, regulatory, and resource demands .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in information assurance and security requirements, conducting security assessments, and developing security controls test plans. Proficient in compliance with NIST standards and managing security audits and risk assessments.
Highest-signal resume keywords
Security Controls AssessmentNIST SP 800-53CISSP CertificationVulnerability ScanningPenetration Testing
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information AssuranceSecurity RequirementsSecurity AuditsRisk AssessmentControl EnhancementsVulnerability TrackingSystem CertificationsCompliance StandardsSecurity RecommendationsAssessment Reports
Soft Skills
Excellent CommunicationInterpersonal Skills
Tools & Technologies
FSA Vulnerability Tracking ToolDHS RVA Standards
Certifications & Qualifications
CISSPHigh Risk Public Trust Security ClearanceSecret Security ClearanceTop Secret Security Clearance
Industry Keywords
FedRAMPRMFFISMAFIPS-IIAuthorization to OperatePOA&MThird Party Website and Applications
About the role
Key responsibilities & impact- Establish and satisfy information assurance and security requirements based on user, policy, regulatory, and resource demands
- Conduct comprehensive assessments of implemented controls and control enhancements
- Schedule and lead System Assessments out-briefs with stakeholders
- Provide SAP, SAR, security recommendations, and system certifications
- Prepare security, privacy, and supply chain assessment reports
- Assess the severity of deficiencies and recommend corrective actions
- Develop and execute Security Controls Test plans, including vulnerability scans and penetration testing aligned with DHS RVA standards
- Produce final analysis reports, executive briefings for the CISO, AO briefing support, findings reports, and POA&M injection templates
- Create or update three-year OSA test plans using NIST SP 800-53 control tests
- Maintain OSA master project schedules using NIST assessment methods and approved OSA procedures
- Create or update program management documentation, including rules of engagement, schedules, annual document reviews, and POA&M and accepted risk review processes
- Ensure vulnerability and penetration tests are scheduled, conducted, analyzed, and presented to system owners and ISSOs
- Meet with ISSOs, systems contractors, and the POAM Team to develop mitigation strategies and evidence criteria
- Populate FSA vulnerability tracking tool injection templates for security deficiencies
- Review and advise on Third Party Website and Applications (TPWA)
- Review and analyze system artifacts supporting Authorization to Operate (ATO) requests
- Submit monthly OSA reports to the CISO covering assessment activities, reviews, audits, configuration management, tests, and residual risks
- Provide enterprise risk ratings, identify trends, and recommend security improvements
Requirements
What you’ll need- Bachelor’s degree or equivalent and at least ten (10) years related experience
- Senior industry professional certification such as CISSP or equivalent required
- At least five (5) years of experience as a Security Controls Assessor or similar audit findings response role
- Excellent communications and interpersonal skills
- Experience with security audits and compliance
- Experience with IT Review Board change requests
- Familiarity with government and agency policies and procedures, including FedRAMP, RMF, FISMA, FIPS-II, and NIST
- U.S. Citizenship is required
- Must be able to obtain a High Risk Public Trust Security Clearance
- Active Secret or Top Secret security clearance preferred
Benefits
Comp & perks- Certification incentive program
- PTO
- Floating federal holiday options
- HMO insurance plans
- High Deductible health plans with Health Savings Accounts (HSAs)
- Flex Spending Accounts (FSAs)
- Full dental plans
- Vision insurance
- Short-term and long-term disability insurance
- Life insurance
- 401(k) match
- Flexible work environment
- Professional development support and rewards for obtaining new certifications