Security Control Assessor – Mid
Arlo Solutions
full-time
Posted on:
Location Type: Hybrid
Location: Washington • United States
Visit company websiteExplore more
Tech Stack
About the role
- Provide the AO with an independent risk assessment of assigned systems and authorization.
- Advise Program Managers on AO determination utilizing OVL documentation.
- Provide senior advisory support to OUSW (R&E) AO regarding authorizations of OUSW (R&E) capabilities.
- Utilize expert knowledge and experience regarding risk management strategies in support of a major DoW program.
- Providing support regarding the agile authorization and OVL processes.
- Provide independent risk analysis and recommendation.
- Collaborate between the AO and the program as well as Program leadership.
- Identify the security baseline based on the mission and security impacts to the system.
- Determine assessment criteria, develop, review, and create a plan to assess the security requirements.
- Assess the security requirements in accordance with the assessment procedures defined in the Security Assessment Plan (SAP).
- Prepare the Security Assessment Report (SAR).
- Monitor POAM actions based on findings and reassess remediated risk(s) as appropriate.
- Develop the Risk Recommendation and AO Determination Brief.
- Develop a system-level continuous monitoring strategy.
- Author and present briefs regarding status of authorizations to AO and other senior Government officials.
- Provides security architecture and DoW compliance advisory support.
Requirements
- Must have an active Top-Secret Clearance SCI eligible.
- Bachelor’s degree in computer science/information technology, or other related degree fields (master’s degree is preferred or at least 5 years of related experience)
- At least 5+ years of cybersecurity experience including a senior technical or management role, Project or Program Management experience a plus.
- At least one IAT/IAM or equivalent security certifications ex. Sec+, CISSP, CCSP, CISM, CISA, or CASP
- Experience working with OSD leadership or Military component or branch.
- Understanding of NIST 800 series guidelines, DoWI 8500.01, DoW 8140.03, rISO 27001, COBIT, DoW RMF, OVL, and current cybersecurity best practices.
- Excellent communication/presentation skills briefing senior military and government civilian leadership.
- Experienced with writing standard operating procedures.
- Experience in hands on with eMASS, Xacta and/or other GRC tools.
- Experience with Federal and FedRamp A&A Processes.
Benefits
- Top Secret with SCI eligibility
- Full time remote
- Travel requirements will vary with location, however, expect approximately 10% to 25%
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
risk assessmentrisk management strategiessecurity requirements assessmentcontinuous monitoring strategysecurity architecturecybersecurityproject managementprogram managementstandard operating proceduressecurity assessment report
Soft Skills
communication skillspresentation skillscollaborationadvisory support
Certifications
Top-Secret ClearanceSec+CISSPCCSPCISMCISACASP