What are the responsibilities and job description for the Security Control Assessor (SCA) – Senior Level position at Tangent Technologies LLC?
Tangent Technologies is seeking a Senior Security Control Assessor (SCA) to act as an independent evaluator to ensure the effectiveness of management, operational, and technical security controls. The candidate will lead cybersecurity compliance assessments, identify control gaps and vulnerabilities, and recommend risk-mitigation strategies to support enterprise system authorization.
Candidates should be proactive, detail-oriented, and possess strong communication skills for client engagement.
This position is a hybrid role, with some onsite work required.
Candidates should be proactive, detail-oriented, and possess strong communication skills for client engagement.
This position is a hybrid role, with some onsite work required.
Key Responsibilities
- Assessment Execution: Plan and execute comprehensive security control assessments in accordance with frameworks like the Risk Management Framework (RMF) and FISMA.
- Testing & Evaluation: Review system configurations, evaluate evidence, and perform technical testing (e.g., vulnerability scanning) to validate security posture.
- Documentation & Reporting: Compile assessment results into Security Assessment Reports (SARs) and generate risk determinations for Authorizing Officials (AOs).
- Remediation & Tracking: Identify control weaknesses and support the development of Plans of Action and Milestones (POA&Ms).
- Team Leadership: Guide junior assessors, review deliverables, and coordinate assessment activities with ISSOs, system owners, and stakeholders.
Required Qualifications
- Education: Bachelor’s degree in cybersecurity, computer science, information systems, or a related field. (Or 6 years of experience equivalency in addition to that listed below)
- Experience: 7 years of hands-on experience in cybersecurity, audit, or compliance, with specialized focus on RMF and NIST 800-series publications.
- Regulatory Expertise: Deep understanding of statutory guidance such as NIST SP 800-53, NIST SP 800-53A, and FISMA.
- Certifications: Industry-recognized credentials such as the Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Authorization Professional (CAP).
- Background Investigation: This role requires a federal background investigation.
Preferred Qualifications
- Experience with cloud-based systems (SaaS, IaaS, PaaS) from major providers such as AWS, Azure, or GCP
- Experience using Microsoft and Google Suite tools
- Familiarity with AI tools such as Gemini, ChatGPT etc.
- Familiarity with Archer or CSAM platforms
- Relevant certifications (one required): CISSP, CISM, CISA, CRISC, CGRC
- Experience supporting federal civilian agencies. Active Public Trust clearance
Veteran Hiring Preference
Tangent Technologies is a Service-Disabled Veteran-Owned Small Business (SDVOSB). Veterans and military-affiliated individuals are strongly encouraged to apply.Security Requirement
Candidates must successfully complete a federal background investigation, which includes a financial suitability screening.