Security Control Assessor – Multiple Levels (L2‑L4)

About the role

A Security Control Assessor (SCA) provides INFOSEC A&A support throughout an NRO program’s lifecycle, ensuring both contractor and government systems processing NRO information meet security requirements.

Key responsibilities

• Review and recommend vulnerability and risk levels for software and hardware products.
• Coordinate A&A activities between industry and government to meet acquisition milestones.
• Develop and implement security‑related directives and guidance for IT‑IA‑IM.
• Assess security of cloud‑based systems (IaaS, PaaS, SaaS) and emerging technologies.

Required profile

• Active TS/SCI clearance with Polygraph.
• Bachelor’s degree in computer engineering, INFOSEC, cyber security, information management, or computer science (or equivalent experience).
• Technical project management experience and familiarity with IA concepts.
• Relevant experience ranging from 3‑10+ years depending on level (Level 2‑4).

Required skills

• IAM Level I Certification: CAP, CompTIA Security+, GSLC.
• IAM Level II Certification: CAP, CASP, CISM, CISSP (Associate), GSCL.
• IAM Level III Certification: CISSP‑ISSEP, CISSP‑ISSAP.
• Practical experience with ISs A&A, risk management strategies, and cloud security assessments.