[Hiring] Security Control Assessor Liaison @JMA Resources

Role Description

The Security Control Assessor (SCA) Liaison supports security control assessments and the Risk Management Framework (RMF) process by coordinating between assessment teams, system stakeholders, and other key partners. This role helps ensure assessment activities, security documentation, findings, and remediation efforts are clearly communicated and aligned with Department of Defense (DoD) and federal cybersecurity requirements.

• Facilitate communication between security control assessors, system stakeholders, and other teams to ensure technical findings and requirements are clearly understood.
• Support the planning and execution of security control assessments, including coordination of assessment scope, test plans, and related activities with the SCA team lead.
• Prepare, review, and maintain security documentation supporting DoD and federal cybersecurity requirements.
• Analyze identified security gaps and weaknesses and support the development of mitigation strategies and Plans of Action and Milestones (POA&Ms).
• Support Assessment and Authorization (A&A) activities throughout the RMF lifecycle.
• Help ensure applicable security policies, controls, standards, and resources are understood and applied appropriately.
• Coordinate with system owners, assessment teams, authorizing officials, and other stakeholders to support effective assessment activities and resolution of findings.
• Perform other related duties as assigned to support evolving company and client needs.

Qualifications

• 7+ years of relevant experience in cybersecurity, network security, information assurance, or related areas.
• Experience serving as a Security Control Assessor or in a related security assessment role, such as a Navy Qualified Validator.
• Experience supporting security assessments and authorization activities within the Risk Management Framework (RMF).
• Hands-on experience with security, compliance, and risk management tools such as STIG Manager, eMASS, Nessus, eMASSTer, and Splunk.
• Must hold a CompTIA Security+ CE certification or one of the following certification substitutions:
  • CompTIA Security X
  • Cisco Certified Network Associate – Security (CCNA Security)
  • Cybersecurity Analyst (CSA+)
  • Global Industrial Cyber Security Professional (GICSP)
  • Systems Security Certified Practitioner (SSCP)
• Strong knowledge of the Risk Management Framework (RMF), including NIST SP 800-37 and NIST SP 800-53.
• Knowledge of vulnerability management, Impact Analysis / Predisposing conditions, and security gap analysis.
• Understanding of applicable cybersecurity laws, regulations, and standards, including NIST, FISMA, and DoD directives.
• Ability to analyze security assessment results, identify root causes, and recommend risk-based mitigation strategies.
• Strong written and verbal communication skills, including the ability to explain technical findings and recommendations to technical and non-technical audiences.
• Ability to collaborate effectively with system owners, assessment teams, authorizing officials, and other stakeholders.

Requirements

• Current or ability to obtain a Department of Defense (DoD) Secret Clearance is required.
• To obtain a security clearance, you must be a U.S. citizen and meet the 13 adjudicative guidelines.

Benefits

• Competitive salary and discretionary bonuses.
• Comprehensive health benefits, including medical, dental, and vision insurance.
• Flexible Paid Time Off (PTO) and holidays to help you maintain a healthy work-life balance.
• Opportunities for professional development and continued learning.
• Hybrid/remote work arrangement with flexible hours.
• 401(k) retirement plan with company match.
• Employee recognition programs and company events.