Security Control Assessor II

General Dynamics

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: West Lake Hills, TX
Salary: $96,569–$130,651 / yr
Posted: 66 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $147k

This role $114k

$87k most similar roles pay here $188k

This role pays less than 76% of similar roles. Most pay $116,050–$177,825 — the shaded band above. At the midpoint, this role pays about $114k versus about $147k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1123 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 984 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Security Control Assessor II

Role Posting Log in to save

The Security Control Assessor (SCA) II joins the Cyber and IT Risk Management team to conduct comprehensive assessments of management, operational, and technical security controls for information systems. This role involves evaluating system effectiveness, identifying vulnerabilities, and recommending corrective actions within the scope of Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities. The candidate will perform assessments based on the Risk Management Framework (RMF) and Joint Special Access Program Implementation Guide (JSIG), develop Security Assessment Reports, and initiate Plans of Action and Milestones. Key responsibilities include evaluating hardware, software, and Cross-Domain Solutions while ensuring compliance with DoD security policies. Required competencies include Information Security Risk Management, mastery of Microsoft Office, and expertise in SAP environments. The role addresses critical security requirements for high-level government information systems to ensure data integrity and availability.

Skills

Risk Management Framework (RMF) JSIG Cross-Domain Solutions (CDS) SDLC Information Security Risk Management Continuous Monitoring Microsoft Office CISSP CASP+ CCNP Security CISA Cybersecurity Security Assessment Report (SAR) Plan of Action and Milestones (POA&M)

What you'll do

Assess management, operational, and technical security controls to determine effectiveness against system requirements.
Conduct information system assessments based on Risk Management Framework (RMF) and JSIG guidelines.
Evaluate authorization packages and provide written recommendations for security authorizations to the government.
Identify vulnerabilities and develop Plans of Action and Milestones (POA&M) to address discovered weaknesses.
Advise stakeholders on assessment issues, impact levels for data integrity, and required security safeguards.
Prepare Security Assessment Reports (SAR) and document results for various authorization boundaries.
Evaluate hardware, software, and Cross-Domain Solutions (CDS) to determine their impact on security boundaries.
Monitor continuous monitoring plans and assist with government compliance inspections and cybersecurity incidents.

What we're looking for

Must be a U.S. citizen.
Must currently possess an active Top Secret/SCI clearance.
Must be able to obtain a Top Secret SCI with a Polygraph.
Must have 3 or more years of experience in SAP, SCI, or Collateral Information Systems security.
Must have at least 2 years of SAP experience.
Must have prior experience as an ISSO, ISSM, or SCA.
Bachelor's degree in a related field, or Associate's degree plus 2 years of experience, or equivalent experience (4 years).
IAT Level III or IAM Level III certification required within 6 months of hire (e.g., CISSP, CASP+ CE, CCNP Security, CISA).