Match score not available

Security Controls Assessor - TS/SCI Required

Remote:

Full Remote

Contract:

Full time

Experience:

Expert & Leadership (>10 years)

Work from:

United States

Offer summary

Qualifications:

Degree in Computer Science or related field preferred., 10+ years Security Controls Assessing experience., 10+ years experience with NIST 800 Series, FIPS 199, 200., CASP+, CySA+, or CISSP certification required..

Key responsabilities:

Conduct Assessment and Authorization (AA) reviews.
Review AA supporting documentation for correctness.

cFocus Software Incorporated Information Technology & Services SME https://cfocussoftware.com/

11 - 50 Employees

See more cFocus Software Incorporated offers

Job description

cFocus Software seeks a Security Controls Assessor to join our program supporting USITC. This position is fully remote. This position requires active TS/SCI clearance.

Qualifications:

A degree in Computer Science, Information Systems, Engineering, Business Administration, or other related discipline is preferred.
10+ years of Security Controls Assessing experience
10+ years of experience with NIST 800 Series, FIPS 199 & 200, FISMA, FedRAMP
At least one of the following certifications: CASP+, CySA+, or CISSP

Duties:

Conduct and Assessment and Authorization (A&A) review for each of the systems, funded on a rotational basis, ensure compliance with all federal and agency requirements
Review all A&A supporting documentation to ensure correctness and consistency
Provide security and privacy expertise and guidance to ensure the consistent application of A&A processes
Maintain and provide reports on the status of all A&A materials and supporting documentation
Verify implementation of controls is consistent with the system security plan (SSP) and system privacy plan and corresponding NIST control requirements
Conduct scanning of websites, network devices, workstations, and servers
Provide A&A expertise in the application of best practices to standardize and enhance A&A processes ensuring compliance with NIST 800-37, Revision 2