C

Chenega

Defense, intelligence, and federal staffing services

Security Control Assessor

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeArlington County, Arlington, VA, USA$159.2k - $185k /yrIn-person

About the Job

Requirements

  • A bachelor's degree, or an associate's degree with at least 2 years of relevant experience, or a high school diploma or GED equivalent with at least 4 years of relevant experience.
  • At least 5 years of relevant experience.
  • DoD 8140 IAM Level II certification is required; accepted certifications include CAP, CASP, CISM, CISSP, GSLC, and CCISO.
  • A Top Secret clearance with SCI eligibility is required.
  • Strong knowledge of Risk Management Framework (RMF) 800-37 and continuous monitoring 800-137.
  • Expert knowledge and hands-on experience with FISMA systems, NIST 800-series guidelines, FIPS, Security Assessment and Authorization (SA&A) requirements and processes, continuous monitoring frameworks and tools, Plan of Action & Milestones (POA&M) policies, vulnerability and patch management, risk management, project management, and Microsoft Word, Excel, and PowerPoint.
  • Proficiency with vulnerability and scanning tools and ability to interpret risk posture based on assessment reports.
  • Experience in project management and tracking, and proficiency with Microsoft Office products.
  • Experience assessing cloud-based security authorizations (FedRAMP, AWS, and Azure) and NIST control responsibilities.
  • Strong knowledge of CSAM.
  • Expertise documenting or reviewing security materials such as system security plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), and other documents under NIST 800 guidelines.
  • Experience supporting cloud-based security authorizations (FedRAMP, AWS, and Azure).
  • Experience creating Security Assessment Plans, Security Assessment Reports, and executive-level briefings.

Responsibilities

  • Advise the A&A Manager on impact levels for the confidentiality, integrity, and availability of information on systems.
  • Conduct a Security Assessment Plan (SAP) for each package assessment.
  • Ensure security assessments are completed for each information system and that each package is submitted by its target date.
  • Initiate a POA&M with identified weaknesses and suspense dates for each information system, based on findings and recommendations from the SAR.
  • Evaluate security assessment documentation and provide written recommendations for security authorization to the A&A Manager, CISO, and AO.
  • Assess proposed changes to information systems, their operating environments, and mission needs that could affect system authorization.
  • Serve as a cybersecurity technical advisor to the A&A Manager for systems under their purview.
  • Contribute to developing the monitoring strategy, ensuring the system-level continuous monitoring strategy conforms to applicable published DoD enterprise-level or DoD Component-level strategies.
  • Determine and document in the SAR a risk level for every noncompliant security control in the system baseline.
  • Determine and document in the SAR the aggregate risk level to the system and identify key drivers for the assessment, considering threats, vulnerabilities, potential impacts, and existing and planned risk mitigation.
  • Develop a continuous monitoring plan specific to the information system.
  • Perform other duties as assigned.

About the Company

Chenega

Defense, intelligence, and federal staffing services

Chenega is a government services contractor that supplies staffing and support services for defense, intelligence, and federal civilian customers, plus commercial clients. It operates across the United States, its territories, and several countries, tapping wide opportunities in government contracting. Its offerings center on staffing and mission support through various contracts, delivering qualified personnel and services to meet client needs. Unlike many industry players, Chenega is rooted in an Alaska Native village corporation, which shapes its ownership and community-focused approach while competing in a broad national market. The company’s goal is to help government and commercial customers execute their missions by providing reliable, professional personnel and services under contract.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Anchorage, AK
Founded
1974

Recently Posted Jobs

Explore more opportunities at Chenega

See more jobs