Security Control Assessor Representative (SCAR)/ Certifying Authority Representative (CAR)
Direct Report: Program Manager
Department: Information Technology & Security
C3EL is seeking candidates for a Security Control Assessor Representative - Certifying Authority Representative position to support the USAF Simulations, Training, and Experimentation (STE) Program (HQ Air Force Wargaming), Joint Base Andrews, Maryland. The employee is responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). The employee will also provide an assessment of the severity of weaknesses or deficiencies discovered in the IS and ts environment of operation and recommend corrective actions to address identified vulnerabilities.
C3EL is supporting the Headquarters United States Air Force Deputy Chief of Staff for Strategy, Planning, and Requirements (HQ USAF/A5) by providing technical expertise for the management, planning and execution of USAF Wargames Series; Global Engagement (GE), Global Mobility / Combat Support (GLOMO/CS), and Futures Game (FG).
Primary Responsibilities:
-
Primary representative to manage process, documentation development to obtain an ATO for new IT system. Perform assessment of ISs, based upon the Risk Management Framework (RMF).
-
Conduct the review and assist with implementation of security requirements for accreditation associated with GameNet systems.
-
Responsible for populating and managing Risk Management Framework (RMF) and Continuous Monitoring (CM) requirements.
-
Coordinating the development and implementation of plans of action and milestones (POA&M) for non-compliant controls due to GameNet being a standalone system.
-
Advise the Government on any assessment and authorization issues.
-
Advise the Government on assessment methodologies and processes.
-
Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization.
-
Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required.
Requirements:
-
5 years minimum as an Information System Manager or Certifying Assessor Representative.
-
Knowledge of STIGs needed for AF Standalone systems.
-
Knowledge of Controls needed for AF Standalone systems.
-
5 years minimum working knowledge for eMASS
-
5 years minimum working knowledge of Security Center
-
Experience with Operational Air Force systems
-
National Institute of Standards and Technology (NIST) Special Publication
-
DoD 8570 Certifications-Security + CE
Active Security Clearance Required; Secret required, preferred TS/SCI edibility
To Apply for this Position:
Please submit your resume and a cover letter that explains your interest in the position and your salary requirements and certifications.
Job Type:
Full-time
Work authorization:
United States (Required)
Work location:
Joint Base Andrews, MD
Travel:
Travel requirements as needed
Benefits:
-Health insurance
-Dental insurance
-Vision insurance
-Retirement plan
-Paid time off
-Parental leave
Paid Training:
-Yes
Typical start time:
-8am
Typical end time:
-5pm