Security Control Assessor II

General Dynamics

Confirmed live 2 days ago High trust

Quick summary

Work type: On-site
Location: Arlington, VA
Salary: $142,792–$181,010 / yr
Posted: 31 days ago
Freshness: Confirmed live 2 days ago
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $160k

This role $162k

$108k most similar roles pay here $212k

This role pays more than 56% of similar roles. Most pay $118,473–$201,755 — the shaded band above. At the midpoint, this role pays about $162k versus about $160k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Security Control Assessor II

Role Posting Log in to save

The Security Control Assessor (SCA) II is responsible for conducting comprehensive assessments of management, operational, and technical security controls within information systems to determine their overall effectiveness. Working within the Cyber and IT Risk Management team, the individual will evaluate system vulnerabilities, prepare Security Assessment Reports, and initiate Plans of Action and Milestones to address identified risks. The role involves assessing systems based on the Risk Management Framework methodology in accordance with the Joint Special Access Program Implementation Guide. Key responsibilities include advising stakeholders on authorization issues, evaluating hardware and software impacts, and overseeing security program policies for Collateral, Sensitive Compartmented Information, and Special Access Program activities. Required competencies include information security management and system security expertise, while technical proficiency involves navigating complex infrastructure to ensure compliance with government standards and requirements for confidentiality, integrity, and availability.

Skills

Risk Management Framework (RMF) JSIG Information Security SDLC Continuous Monitoring Cybersecurity Security Assessment Report (SAR) Plan of Action and Milestones (POA&M) CISSP CISA CASP+ CCNP Security SAP SCI

What you'll do

Assess management, operational, and technical security controls to determine overall effectiveness for information systems.
Perform system assessments based on Risk Management Framework (RMF) methodology and JSIG guidelines.
Evaluate authorization packages and provide formal recommendations to the Authorizing Official.
Identify vulnerabilities and develop Plans of Action and Milestones (POA&M) to address discovered weaknesses.
Prepare Security Assessment Reports (SAR) for various authorization boundaries.
Advise stakeholders on security impacts regarding confidentiality, integrity, and availability of information.
Evaluate hardware and software to determine potential security impacts on authorization boundaries.
Assess the effectiveness and implementation of Continuous Monitoring Plans.

What we're looking for

Must be a United States citizen.
Must currently possess an active Top Secret/SCI clearance.
Must be able to obtain a Top Secret/SCI with a CI Polygraph.
Must have at least 7 years of related experience.
Must have at least 4 years of experience in SAP, SCI, or Collateral Information Systems security.
Prior performance in the role of an ISSO, ISSM, or SCA is required.
Bachelor's degree in a related discipline, or Associate's degree plus 2 years of experience, or equivalent experience (4 years).
US Citizenship.