[Hiring] Senior Security Control Assessor @SkyePoint Decisions

Role Description

SkyePoint Decisions is seeking a Senior Security Control Assessor to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS) in Washington, DC. This is a remote position.

• Establish and satisfy information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Conduct a comprehensive assessment of implemented controls and control enhancements to determine the effectiveness of the controls.
• Schedule and lead System Assessments out-briefs with different stakeholders and provide SAP, SAR, security recommendations and system certifications.
• Prepare security, privacy, and supply chain assessment reports containing the results and findings from the assessment.
• Provide an assessment of the severity of the deficiencies discovered in the system, environment of operation, and common controls and recommend corrective actions.
• Develop and execute a comprehensive Security Controls Test (SCT) plan that details all assessment activities.
• Create or update a 3-year OSA test plan for each system that includes the most recent versions of NIST SP 800-53 control tests.
• Complete and maintain an OSA master project schedule by using NIST assessment methods and approved OSA procedures.
• Create or update program management documentation that includes rules of engagement, schedules, and process for POA&M and accepted risk reviews.
• Ensure that appropriate vulnerability and penetration tests are scheduled, conducted, analyzed, and presented to the system owner and ISSO.
• Meet with the system ISSO(s), systems contractors, and the POAM Team to develop mitigation strategies and identify acceptable evidence criteria.
• Review and provide advice based on analysis for Third Party Website and Applications (TPWA).
• Review and analyze all system artifacts for accuracy and completeness in support of ATO requests.
• Create and submit to the CISO a monthly OSA report that itemizes and describes the OSA scheduled assessment activities.
• Provide a risk rating based on the risk profiles of all systems in the OSA program, identify trends, and provide recommendations for improving security.

Qualifications

• Bachelor’s degree or equivalent and at least ten (10) years related experience.
• Senior industry professional such as CISSP or equivalent required.
• At least five (5) years of experience as a Security Controls Assessor or similar audit findings response role.
• Excellent communications and interpersonal skills.
• Experience with security audits and compliance.
• Experience with IT Review Board change requests.
• Good familiarity with and understanding of all relevant government and agency policies and procedures.
• U.S. Citizenship is required.
• Must be able to obtain a High Risk Public Trust Security Clearance.

Preferred Qualifications

• Active Secret or Top Secret security clearance.

Compensation

Salary Range: TBD. The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Benefits

• Certification incentive program.
• PTO and floating federal holiday options.
• Several insurance options including HMO and High Deductible plans with Health Savings Accounts (HSAs).
• Flex Spending Accounts (FSAs).
• Full Dental Plans, Vision, ST/LT Disability, Life Insurance.
• 401k matched.

What We Can Offer You

• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts (HSAs).
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.
• Flexible Work Environment.

Company Description

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability.

SkyePoint Decisions is a participating E-Verify Employer. U.S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled.