Senior Security Control Assessor, SCA
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Control Assessor supporting TSA’s cybersecurity governance, risk, and compliance mission. Evaluating security controls, authorization packages, vulnerabilities, and remediation activities.
Responsibilities:
- Serve as an independent Security Control Assessor (SCA)
- Provide Security Assessment & Authorization (A&A), Ongoing Authorization (OA), and Risk Assessment (RA) support
- Plan, coordinate, and execute security assessments, including scheduling, kickoff meetings, control evaluations, and stakeholder engagement
- Assess security controls, analyze vulnerabilities and findings, perform risk analysis, and support remediation planning
- Develop, maintain, and manage Security Authorization Packages, RAMs, POA&Ms, Privileged Account Audits, and other authorization documentation
- Document, track, and maintain assessment results, evidence, findings, and authorization artifacts in CSAM and other approved GRC repositories
- Review security standards, hardening requirements, and assessment results to support authorization decisions and risk determinations
- Support development and refinement of security assessment methodologies, procedures, and requirements
Requirements:
- Active Secret clearance required
- Must be able to obtain TSA clearance
- Knowledge of Security Assessment & Authorization (A&A), Ongoing Authorization (OA), and Risk Assessment (RA) processes
- Ability to assess and validate security controls in support of authorization activities
- Understanding of security authorization package development and supporting documentation requirements
- Ability to develop and maintain authorization packages, POA&Ms, RAMs, and related security documentation
- Familiarity with GRC tools, including CSAM, and security compliance requirements
- Knowledge of security standards, control frameworks, and system hardening requirements
- Ability to conduct security audits, analyze findings, and support remediation efforts
- Strong collaboration and communication skills for working with technical, cybersecurity, and system stakeholders
- Knowledge of security assessment methodologies and emerging security frameworks, including Zero Trust
- Familiarity with DISA STIGs, DISA SRGs, and system hardening requirements
- Understanding of vulnerability assessments, penetration testing, and risk assessment activities
- Familiarity with Tenable/Nessus, AppDetective, WebInspect, AppScan, and Nipper
- Ability to develop security reports, briefings, and risk-based recommendations
- BA/BS degree in Cybersecurity, Information Technology, or a related discipline plus seven (7) years of experience
Similar Jobs
Senior Information Security Specialist
Senior Information Security Specialist advancing GRC, third-party risk, compliance, and incident readiness. Supporting Halcyon’s adaptive platform dedicated to stopping ransomware.
Senior Security Control Assessor – FedRAMP 3PAO
Senior FedRAMP assessor leading cloud security compliance audits for Insight Assurance, a global cybersecurity and compliance audit firm. Evaluating NIST controls and mentoring assessment teams.
Junior Information Security and Privacy Consultant
Consultor de segurança da informação e privacidade apoiando assessments, avaliações de riscos e adequação a frameworks. Elaborando relatórios e recomendações para projetos de clientes diversos.
Security Impact Analysis Engineer
SIA Engineer supporting TSA information-system security impact analyses and RMF compliance. Evaluating cybersecurity risks, controls, architectures, and authorization documentation for Titan Technologies.
Senior Cybersecurity Engineer, TS/SCI Clearance Required
ACAS cybersecurity engineer managing Nessus-based vulnerability assessment and DoD compliance. Supporting Air Operation Center cybersecurity, remediation, and incident reporting.
Head of Cyber Security
Head of Cyber Security leading cybersecurity strategy and governance for ABB’s global Process Control Platform. Protecting automation products through risk management, compliance, Linux and Kubernetes expertise.
Staff Product Security Engineer
Staff Product Security Engineer leading penetration testing across Guidewire’s cloud insurance platform. Securing web applications, APIs, SaaS architectures, and AI-powered product features.
Information Systems Security Officer
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.