Security Control Assessor I

General Dynamics

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Washington, DCSuitland, MDArlington, VA
Salary
$96,569–$130,651 / yr
Posted
55 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $166k
This role $114k
$84k $211k
below market most similar roles pay here above market

This role pays less than 86% of similar roles. Most pay $134,087–$198,462 — the blue band above. At the midpoint, this role pays about $114k versus about $166k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Security Control Assessor I

The Security Control Assessor (SCA) I joins the Cyber and IT Risk Management team to conduct comprehensive assessments of management, operational, and technical security controls within information systems. This role involves evaluating the effectiveness of controls to ensure they meet security requirements for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities. Key responsibilities include performing assessments based on the Risk Management Framework (RMF) methodology in accordance with the Joint Special Access Program (JSIG) Implementation Guide. The candidate will identify vulnerabilities, recommend corrective actions, and prepare Security Assessment Reports. Required competencies include Information Security Management, Risk Management, and Standards. The role requires expertise in SAP, SCI, or Collateral Information Systems security, as well as experience with the system development life cycle (SDLC) and continuous monitoring plans.

What you'll do

  • Conduct comprehensive assessments of management, operational, and technical security controls for information systems.
  • Perform system assessments based on RMF methodology and JSIG guidelines for SAP, SCI, and Collateral systems.
  • Evaluate authorization packages and provide formal recommendations to the Authorizing Official (AO) or Delegated Authority (DAO).
  • Document security assessment results and prepare the Security Assessment Report (SAR) for the authorization boundary.
  • Initiate Plans of Action and Milestones (POA&M) to address identified weaknesses and vulnerabilities.
  • Evaluate hardware and software to determine security impacts on authorization boundaries.
  • Assess the effectiveness and implementation of Continuous Monitoring Plans.
  • Assist the government with cybersecurity incident response and compliance inspections.

What we're looking for

  • Must be a US Citizen.
  • Must currently possess an active Top Secret/SCI security clearance.
  • Must be willing to submit to a CI polygraph.
  • Must have 9+ years of related experience.
  • Must have 5+ years of related experience and a Bachelor's degree in a related discipline.
  • Must have 5+ years of related experience and an Associate's degree in a related area plus 2 years of experience.
  • Must have 4 years of equivalent experience.
  • Must have experience in SAP, SCI, or Collateral Information Systems security.
  • Must have prior experience in the roles of ISSO and ISSM.
  • Must possess IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 1 within 6 months of hire.
  • Must be able to regularly lift 50lbs.

More like this

Similar roles

Security Control Assessor I

General Dynamics

Colorado Springs, CO 62 days ago $129,813–$158,815
Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Security Cybersecurity System Security Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) CISSP CASP+ CE CCNP Security CISA IAM Level 1 IAT Level 3
5+ yrs exp

Security Control Assessor II

General Dynamics

Arlington, VA 76 days ago $142,792–$181,010
Risk Management Framework (RMF) JSIG Information Security SDLC Continuous Monitoring Cybersecurity Information System Security Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) SAP SCI CISSP CASP+ CE CCNP Security CISA
7+ yrs exp

Security Control Assessor II

General Dynamics

Ogden, UT 103 days ago $129,965–$175,835
Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Assurance Cybersecurity Information Security Management Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) Information System Security SAP SCI Confidentiality Integrity Availability
7+ yrs exp

Security Control Assessor II

General Dynamics

Bedford, MA +12 51 days ago $142,792–$181,010
Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Assurance Cybersecurity Information Security Management Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) SAP SCI Information System Security Confidentiality Integrity Availability
7+ yrs exp

Security Control Assessor II

General Dynamics

West Lake Hills, TX 111 days ago $96,569–$130,651
Risk Management Framework (RMF) JSIG Cross-Domain Solutions (CDS) SDLC Continuous Monitoring Information Security Risk Management Information Security Standards Information System Security Microsoft Office CISSP CASP+ CE CCNP Security CISA Cybersecurity SAP SCI Collateral Information Systems
4+ yrs exp

Security Control Assessor

Booz Allen Hamilton

Herndon, VA 14 days ago $99,000–$225,000
Risk Management Framework (RMF) Cloud Security Vulnerability Assessment Security Control Assessment AWS Oracle Microsoft Google Xacta Nessus Rapid7 Nipper Big Data Analytics Cybersecurity Hygiene POA&M Security Engineering