SCA

Security Controls Assessor (SCA)

Program Description:
This role focuses on evaluating and validating the security of information systems to ensure they meet cybersecurity and compliance requirements. You will work closely with stakeholders to review security documentation, assess security controls, identify vulnerabilities, and provide clear reporting to support risk-based decisions. The position also involves supporting incident mitigation, evaluating proposed technologies for security risks, and documenting and communicating findings and recommendations. This is a great opportunity to apply your security assessment expertise while supporting a growing team and mission.

Day-to-day Responsibilities:

Review and assess system security packages and bodies of evidence
Conduct and document the management, operational, and technical security control effectiveness applied on information systems
Assess information systems' weaknesses or deficiencies and recommending corrective actions to address vulnerabilities
Providing the initial mitigation of Cybersecurity incidents, supporting incident investigations, and closing incidents
Assessing proposed hardware, software, and firmware for vulnerabilities
Draft and submitting formal documentation including Security Assessment Reports, Cybersecurity Assessment Reports, Compliance Reports, Incident Reports, Technical Assessment Reports
Review and assessing Plans of Actions and Milestones