Security Control Assessor I

General Dynamics

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Colorado Springs, CO
Salary: $129,813–$158,815 / yr
Posted: 17 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $168k

This role $144k

$120k most similar roles pay here $215k

This role pays less than 68% of similar roles. Most pay $130,250–$205,950 — the shaded band above. At the midpoint, this role pays about $144k versus about $168k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Security Control Assessor I

Role Posting Log in to save

The Security Control Assessor (SCA) I joins the Cyber and IT Risk Management team to conduct comprehensive assessments of management, operational, and technical security controls for information systems. This role involves evaluating the effectiveness of controls, identifying vulnerabilities, and recommending corrective actions within Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments. The individual will perform assessments based on the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (JSIG) Implementation Guide. Key responsibilities include evaluating authorization packages, preparing Security Assessment Reports (SAR), initiating Plans of Action and Milestones (POA&M), and overseeing security program policy. Required competencies include information security, risk mitigation strategies, and system security. The role requires expertise in SAP, SCI, and Collateral Information Systems to ensure robust cybersecurity measures across various hardware and software components.

Skills

Risk Management Framework (RMF) JSIG SDLC Information Security Cybersecurity Continuous Monitoring Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) CISSP CASP+ CCNP Security CISA

What you'll do

Assess management, operational, and technical security controls to determine their effectiveness in meeting system requirements.
Perform information system assessments based on the Risk Management Framework (RMF) and JSIG guidelines.
Identify security weaknesses and deficiencies to recommend corrective actions and initiate Plans of Action and Milestones (POA&M).
Evaluate authorization packages and provide written recommendations for security authorizations to government officials.
Assess hardware and software impacts on authorization boundaries and evaluate the effectiveness of Continuous Monitoring Plans.
Advise stakeholders on information system risks, impact levels for confidentiality, integrity, and availability, and any assessment issues.
Assist with government compliance inspections and manage cybersecurity incidents by ensuring proper corrective measures are taken.

What we're looking for

Must be a United States citizen.
Must currently possess an active Top Secret/SCI clearance and be willing to submit to a CI polygraph.
Must have at least 5 years of related experience.
Must have experience in SAP, SCI, or Collateral Information Systems security.
Prior performance in the roles of ISSO and ISSM is required.
A Bachelor's degree in a related discipline, or an Associate's degree plus 2 years of experience, or equivalent experience (4 years) is required.
Must obtain IAT Level 3 or IAM Level 1 certification within 6 months of hire.
US Citizenship.