Security Control Assessor II

General Dynamics

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Arlington, VA
Salary: $142,792–$181,010 / yr
Posted: 76 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $155k

This role $162k

$111k $204k

below market most similar roles pay here above market

This role pays more than 55% of similar roles. Most pay $120,000–$190,510 — the blue band above. At the midpoint, this role pays about $162k versus about $155k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Security Control Assessor II

Role Posting Log in to save

The Security Control Assessor (SCA) II joins the Cyber and IT Risk Management team to conduct comprehensive assessments of management, operational, and technical security controls within information systems. This role involves evaluating the effectiveness of controls to ensure they meet security requirements for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities. Key responsibilities include performing assessments based on the Risk Management Framework (RMF) methodology and the Joint Special Access Program (JSIG) Implementation Guide, identifying vulnerabilities, and recommending corrective actions. The candidate will prepare Security Assessment Reports, initiate Plans of Action and Milestones, and advise stakeholders on authorization issues. Required competencies include Information Security Management, Information System Security, and experience with the system development life cycle (SDLC) and continuous monitoring plans.

Skills

Risk Management Framework (RMF) JSIG Information Security SDLC Continuous Monitoring Cybersecurity Information System Security Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) SAP SCI CISSP CASP+ CE CCNP Security CISA

What you'll do

Conduct comprehensive assessments of management, operational, and technical security controls for information systems.
Perform information system assessments based on RMF methodology and JSIG guidelines.
Evaluate authorization packages and provide formal recommendations to the Authorizing Official.
Identify system vulnerabilities and initiate Plans of Action and Milestones (POA&M) to address weaknesses.
Prepare Security Assessment Reports (SAR) and document results for specific authorization boundaries.
Evaluate hardware and software to determine security impacts on authorization boundaries.
Assess the effectiveness and implementation of Continuous Monitoring Plans.
Assist the government with cybersecurity incident response and compliance inspections.

What we're looking for

Must be a US Citizen.
Must currently possess an active Top Secret/SCI security clearance.
Must be able to obtain a Top Secret SCI clearance with a CI Polygraph.
Must have 7+ years of related experience.
Must have at least 4 years of experience in SAP, SCI, or Collateral Information Systems security.
Must have prior experience in the role of an ISSO, ISSM, or SCA.
Must have a Bachelor's degree in a related discipline, or an Associate's degree plus 2 years of experience, or equivalent experience.
Must obtain IAT Level III certification (e.g., CISSP, CASP+ CE, CCNP Security, CISA) within 6 months of hire.

Similar roles

Security Control Assessor II

General Dynamics

Bedford, MA +12 51 days ago $142,792–$181,010

Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Assurance Cybersecurity Information Security Management Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) SAP SCI Information System Security Confidentiality Integrity Availability

7+ yrs exp

Save

Security Control Assessor II

General Dynamics

Ogden, UT 103 days ago $129,965–$175,835

Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Assurance Cybersecurity Information Security Management Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) Information System Security SAP SCI Confidentiality Integrity Availability

7+ yrs exp

Save

Security Control Assessor I

General Dynamics

Colorado Springs, CO 62 days ago $129,813–$158,815

Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Security Cybersecurity System Security Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) CISSP CASP+ CE CCNP Security CISA IAM Level 1 IAT Level 3

5+ yrs exp

Save

Security Control Assessor I

General Dynamics

Washington, DC +2 55 days ago $96,569–$130,651

Risk Management Framework (RMF) JSIG SDLC Continuous Monitoring Information Security Risk Management Information Security Standards Cybersecurity Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) CISSP CASP+ CE CCNP Security CISA Information System Security SAP Network Infrastructure

9+ yrs exp

Save

Security Control Assessor

Booz Allen Hamilton

Herndon, VA 14 days ago $99,000–$225,000

Risk Management Framework (RMF) Cloud Security Vulnerability Assessment Security Control Assessment AWS Oracle Microsoft Google Xacta Nessus Rapid7 Nipper Big Data Analytics Cybersecurity Hygiene POA&M Security Engineering

Save

Security Control Assessor

Leidos

Alexandria, VA +2 27 days ago $69,550–$125,725

RMF STIGs eMASS Nessus ACAS SCAP HBSS NIST SP 800-53 NIST SP 800- 37 CNSSI 1253 Vulnerability Assessment Cyber Threat Emulation Cloud Native Tools Windows UNIX Network Security Endpoint Security Solutions Databases TTPs

5+ yrs exp

Save