Security Control Assessor - Representative (SCA-R)
Amyx is seeking several Security Control Assessor - Representative (SCA-R) personnel to support our US Transportation Command (TRANSCOM) customer at Scott Air Force Base, IL. The SCA-R will independently assess the adequacy and compliance of security controls applied to the agency on behalf of the TRANSCOM SCA and Authorizing Official (AO). SCA-R personnel will assist Government personnel with the overall responsibility to conduct independent comprehensive assessments of the management, operational, privacy and technical security controls and controls enhancements employed within or inherited by an IT system to determine the overall effectivness of the controls for numerous Programs of Record in use across the Enterprise.
Responsibilities:
- Assess, identify, and provide to the Government, for AO approval, a listing of recommended enterprise security controls/enhancements that provide mission assurance for cyber-key terrain systems supporting USTRANSCOM's mission.
- Provide SME support for RMF activities within and/or outside Enterprise Mission Assurance Support Service (eMASS) or other tool as designated by the Government.
- Provide technical and operational analyses of supporting artifacts and provide risk analysis recommendations to the SCA.
- Perform triage of authorization, POA&M, System Security Plan, System Categorization, and risk acceptance requests using the USTRANSCOM RMF Artifact Quality Rubric.
- Identify non-compliant submissions, document in the Package Return Report (PRR), and submit to the Government SCA for approval and signature.
- Review security artifacts provided by program offices or other organizations and assess both technical and functional adequacy of cybersecurity/Information Assurance (IA) controls.
- Perform the Independent Verification and Validation (IV&V) role within the eMASS tool on NIPRNet and SIPRNet, verifying that controls are in-place, operating as intended, producing desired outcomes, and providing feedback to submitters on non-compliant security controls, adequacy of artifacts, and POA&M items, and provide the required PRR as needed.
- Compile Authorization Official package to include risk assessment, required artifacts, and required approval documents to support risk recommendations to the AO in accordance with Government guidance.
- Create and coordinate RMF packages such as categorizations, security plans and POA&Ms for signature by approved authorities as designated by the Government and IAW suspense assigned by the Government.
- Manage eMASS user accounts (i.e., add, delete, and assign/update roles) for USTRANSCOM's instance of eMASS per Government direction.
- Create and process authorization packages within the workflow tool, Certification and Accreditation Process Tool (CAPT) or other tool as designated by the Government and as requested by the Government.
- Track status of checklists and packages from submission through approval or disapproval decision by the AO.
Technology used: eMASS, RMF, ACAS
Must have the ability to communicate accurate information
Qualifications:
- SCA-R Level III requires IAM-III certification
- Minimum of 5 years of related experience
- Secret security clearance
- Thorough understanding and experience with DoD RMF tool eMASS
- Excellent written and verbal communication skills, demonstrating the ability to present material to senior DoD and non-DoD officials.
- Able to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.
Desired Skills:
- BA/BS degree from an accredited university
- Demonstrated knowledge and understanding of the USTRANSCOM mission
- Experience with PPSM is desired
Benefits include:
- Medical, Dental, and Vision Plans (PPO & HSA options available)
- Flexible Spending Accounts (Health Care & Dependent Care FSA)
- Health Savings Account (HSA)
- 401(k) with matching contributions
- Roth
- Qualified Transportation Expense with matching contributions
- Short Term Disability
- Long Term Disability
- Life and Accidental Death & Dismemberment
- Basic & Voluntary Life Insurance
- Wellness Program
- PTO
- 11 Holidays
- Professional Development Reimbursement
Physical Demands: Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.
Security Control Assessor - Representative (SCA-R)
Amyx is seeking several Security Control Assessor - Representative (SCA-R) personnel to support our US Transportation Command (TRANSCOM) customer at Scott Air Force Base, IL. The SCA-R will independently assess the adequacy and compliance of security controls applied to the agency on behalf of the TRANSCOM SCA and Authorizing Official (AO). SCA-R personnel will assist Government personnel with the overall responsibility to conduct independent comprehensive assessments of the management, operational, privacy and technical security controls and controls enhancements employed within or inherited by an IT system to determine the overall effectivness of the controls for numerous Programs of Record in use across the Enterprise.
Responsibilities:
- Assess, identify, and provide to the Government, for AO approval, a listing of recommended enterprise security controls/enhancements that provide mission assurance for cyber-key terrain systems supporting USTRANSCOM's mission.
- Provide SME support for RMF activities within and/or outside Enterprise Mission Assurance Support Service (eMASS) or other tool as designated by the Government.
- Provide technical and operational analyses of supporting artifacts and provide risk analysis recommendations to the SCA.
- Perform triage of authorization, POA&M, System Security Plan, System Categorization, and risk acceptance requests using the USTRANSCOM RMF Artifact Quality Rubric.
- Identify non-compliant submissions, document in the Package Return Report (PRR), and submit to the Government SCA for approval and signature.
- Review security artifacts provided by program offices or other organizations and assess both technical and functional adequacy of cybersecurity/Information Assurance (IA) controls.
- Perform the Independent Verification and Validation (IV&V) role within the eMASS tool on NIPRNet and SIPRNet, verifying that controls are in-place, operating as intended, producing desired outcomes, and providing feedback to submitters on non-compliant security controls, adequacy of artifacts, and POA&M items, and provide the required PRR as needed.
- Compile Authorization Official package to include risk assessment, required artifacts, and required approval documents to support risk recommendations to the AO in accordance with Government guidance.
- Create and coordinate RMF packages such as categorizations, security plans and POA&Ms for signature by approved authorities as designated by the Government and IAW suspense assigned by the Government.
- Manage eMASS user accounts (i.e., add, delete, and assign/update roles) for USTRANSCOM's instance of eMASS per Government direction.
- Create and process authorization packages within the workflow tool, Certification and Accreditation Process Tool (CAPT) or other tool as designated by the Government and as requested by the Government.
- Track status of checklists and packages from submission through approval or disapproval decision by the AO.
Technology used: eMASS, RMF, ACAS
Must have the ability to communicate accurate information
Qualifications:
- SCA-R Level III requires IAM-III certification
- Minimum of 5 years of related experience
- Secret security clearance
- Thorough understanding and experience with DoD RMF tool eMASS
- Excellent written and verbal communication skills, demonstrating the ability to present material to senior DoD and non-DoD officials.
- Able to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.
Desired Skills:
- BA/BS degree from an accredited university
- Demonstrated knowledge and understanding of the USTRANSCOM mission
- Experience with PPSM is desired
Benefits include:
- Medical, Dental, and Vision Plans (PPO & HSA options available)
- Flexible Spending Accounts (Health Care & Dependent Care FSA)
- Health Savings Account (HSA)
- 401(k) with matching contributions
- Roth
- Qualified Transportation Expense with matching contributions
- Short Term Disability
- Long Term Disability
- Life and Accidental Death & Dismemberment
- Basic & Voluntary Life Insurance
- Wellness Program
- PTO
- 11 Holidays
- Professional Development Reimbursement
Physical Demands: Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.
