SCA Jobs

Summary

Security Controls Assessor (SCA)

This role focuses on evaluating and validating the security of information systems to ensure they meet cybersecurity and compliance requirements. You will work closely with stakeholders to review security documentation, assess security controls, identify vulnerabilities, and provide clear reporting to support risk-based decisions. The position also involves supporting incident mitigation, evaluating proposed technologies for security risks, and documenting and communicating findings and recommendations. This is a great opportunity to apply your security assessment expertise while supporting a growing team and mission.

Day-to-day Responsibilities:

• Review and assess system security packages and bodies of evidence
• Conduct and document the management, operational, and technical security control effectiveness applied on information systems
• Assess information systems' weaknesses or deficiencies and recommending corrective actions to address vulnerabilities
• Providing the initial mitigation of cybersecurity incidents, supporting incident investigations, and closing incidents
• Assessing proposed hardware, software, and firmware for vulnerabilities
• Draft and submitting formal documentation including Security Assessment Reports, Cybersecurity Assessment Reports, Compliance Reports, Incident Reports, Technical Assessment Reports
• Review and assessing Plans of Actions and Milestones

Job Description

Security Controls Assessor (SCA)

This role focuses on evaluating and validating the security of information systems to ensure they meet cybersecurity and compliance requirements. You will work closely with stakeholders to review security documentation, assess security controls, identify vulnerabilities, and provide clear reporting to support risk-based decisions. The position also involves supporting incident mitigation, evaluating proposed technologies for security risks, and documenting and communicating findings and recommendations. This is a great opportunity to apply your security assessment expertise while supporting a growing team and mission.

Day-to-day Responsibilities:

• Review and assess system security packages and bodies of evidence
• Conduct and document the management, operational, and technical security control effectiveness applied on information systems
• Assess information systems' weaknesses or deficiencies and recommending corrective actions to address vulnerabilities
• Providing the initial mitigation of cybersecurity incidents, supporting incident investigations, and closing incidents
• Assessing proposed hardware, software, and firmware for vulnerabilities
• Draft and submitting formal documentation including Security Assessment Reports, Cybersecurity Assessment Reports, Compliance Reports, Incident Reports, Technical Assessment Reports
• Review and assessing Plans of Actions and Milestones