A&A Security Control Assessor Manager

Req ID: 38189

Summary

A&A Security Control Assessor Manager

Arlington, VA

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

The A&A Security Control Assessor Manager specializes in evaluating and approving system interconnections and network connections within the federal environment that specifically support a DARPA technical office. This role focuses on ensuring secure connectivity between systems while maintaining compliance with DoD, JSIG, and IC security requirements.

Responsibilities

• Review and assess Authorization to Operate and Authorization to Connect (ATC) packages for system interconnections
• Evaluate security controls for proposed system connections and data flows
• Conduct risk assessments for interconnection agreements between systems
• Develop and maintain System Interconnection Agreements (SIA)
• Coordinate with network architects and system administrators on secure connection requirements
• Assess the impact of proposed connections on existing security authorizations
• Document connection-specific security controls and monitoring requirements
• Support the development of network security architectures
• Maintain inventory of authorized system connections and their security status
• Provide technical guidance on secure network design and implementation
• Support incident response activities related to network security events
• Process authorized file transfers (AFTs)
• Supports the technical office as a cybersecurity advisor on processing connections to enterprise systems
• Review and evaluate comprehensive Connection Approval Packages (CAP)
• Assess proposed system architectures for security control implementation
• Conduct detailed security control assessments for interconnecting systems
• Develop risk calculations and scoring for CAP packages
• Develop assessment methodologies
• Coordinate with multiple stakeholders, including system owners, network administrators, and authorizing officials
• Ensure compliance with DoD 8510 RMF requirements for system connections
• Review security documentation, including System Security Plans, risk assessments, and contingency plans
• Provide technical recommendations for connection approval or conditional approval
• Support the development of connection-specific monitoring strategies
• Maintain documentation of approved connections and their security posture
• Participate in connection approval boards and technical review meetings
• Other duties as assigned.

Qualifications

• Bachelor's degree or higher. Can be substituted for associate's degree with 2+ years of relevant experience OR
• High school diploma or GED equivalent with 4+ years relevant experience.
• 12+ years relevant experience.
• DOD 8140 IAM Level II (CAP, CASP, CISM, CISSP, GSLC, CCISO).
• Top-Secret Clearance with SCI eligibility is required.

Knowledge, Skills and Abilities:

• Performing work onsite is required.
• Experience with DARPA network environments and research systems
• Knowledge of specialized government network architectures (SIPR, NIPR, etc.)
• Background in network penetration testing or vulnerability assessment
• Experience conducting assessments on DOD environments
• Background in system engineering or network architecture
• Familiarity with automated risk assessment tools and methodologies
• Working knowledge of DOD Cybersecurity Regulations to include:
• (U) NIST Federal Information Processing Standard Publication (FIPS) No. 199 "Standards for Security Categorization of Federal Information and Information Systems", February 2004
• (U) NIST Federal Information Processing Standard Publication (FIPS) No. 200 "Minimum Security requirements for Federal Information and Information Systems", March 2006
• (U) NIST Special Publication 800-59 "Guideline for Identifying an Information System as a National Security System", August 2003
• (U) NIST Special Publication 800-60, Volumes I-II, Revision 1, "Guide for Mapping Types of Information and Information System to Security Categories", August 2008
• (U) Committee on National Security Systems Instruction (CNSSI) No. 1253, "Security Categorization and Control Selections for National Security Systems," current edition
• (U) NIST Special Publication 800-53, "Security and Privacy Controls for Federal Information Systems and Organizations," current edition
• (U) DoD Instruction 8510.01, "Risk Management Framework (RMF) for DoD Information Technology (IT)," current edition
• (U) DoD Instruction (DoDI) 8500.01, Cybersecurity, March 14, 2014
• Joint Special Access Program (SAP) Implementation Guide (JSIG)

How you'll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn.

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.

Learn more about what working at Chenega MIOS can mean for you.

Chenega MIOS's culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Learn more about Chenega's impact on the world.

Chenega MIOS News- ;br>
Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:

Chenega MIOS web site - ;br>
Glassdoor - _IE369514.11,23.htm

LinkedIn - ;br>
Facebook - ;br>
Chenega Corporation and family of companies is an EOE.

Equal Opportunity Employer/Veterans/Disabled

Native preference under PL 93-638.

We participate in the E-Verify Employment Verification Program