IT Security Controls Assessor (Information Assurance)

Quick Facts

• Role: IT Security Controls Assessor (Information Assurance)
• Level: GS-13

Description

Lead and support IT projects and programs that impact delivery of National Security and Intelligence systems, ensuring alignment with organizational goals. Serve as a liaison to information assurance programs and participate in coordinating system accreditation. Evaluate security and privacy controls effectiveness, risk, and remediation activities to support authorization decisions.

Responsibilities

• Coordinate with information assurance programs to support system accreditation
• Consult with other IT specialty experts to communicate, troubleshoot, and instruct customers on required actions
• Support IT projects/programs impacting classified hardware/software delivery for new or modified networks
• Assess information system security and privacy controls to determine control effectiveness, identify risk, support authorization decisions, and validate remediation
• Evaluate technical, management, and operational controls against applicable frameworks
• Review system configurations, policies, procedures, scans, logs, diagrams, inventories, and other artifacts to identify deficiencies and recommend remediation
• Perform on-premise and cloud-based security scanning for vulnerabilities, compliance, and code
• Review POAMs and validate corrective actions to support POAM closure
• Conduct ongoing security evaluations, analyze vulnerability data, and assess change impacts to determine reassessment needs

Requirements

• U.S. citizenship
• Successful completion of a background investigation
• Pre-employment drug test; random testing may occur (Testing Designated Position)
• Ability to obtain and maintain Top-Secret security clearance
• Complete required online assessments (USAHire) if required
• Meet the Individual Occupational Requirement competencies (all nine) with explicit resume evidence
• For GS-13: at least 1 year specialized experience equivalent to GS-12 in applying new cybersecurity practices, assessing efficiency/operations improvements, planning/implementing operational cybersecurity programs, and providing CISO-related leadership
• Related experience across security/privacy control assessments, framework-based control evaluation, artifact review, on-premise and cloud scanning, POAM corrective action validation, and ongoing vulnerability/change impact evaluations

Benefits

Comprehensive federal employee benefits package (eligibility depends on position specifics).