> Markdown version of [/jobs/ext/2212508-cyber-information-systems-analyst-sme-assessment-function-sca-separate](https://www.wearedevelopers.com/jobs/ext/2212508-cyber-information-systems-analyst-sme-assessment-function-sca-separate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Information Systems Analyst - SME - Assessment Function (SCA-Separate)

- **Company:** QBE LLC
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $115,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** CompTIA Security+, Cyber Security, Information Systems, Information Technology
- **Published:** August 24, 2026
- **Apply:** https://www.disabledperson.com/jobs/74511099-cyber-information-systems-analyst-sme-assessment-function-sca-separate

## About the Role

* Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement.

 * At least 10 years of relevant experience aligned to the responsibilities of this position.

 * Extensive experience conducting independent security control assessments.

 * Expert knowledge of federal RMF and security control assessment practices.

 * Experience developing Security Assessment Plans and Security Assessment Reports.

 * Strong technical testing, risk analysis, and documentation skills.

 * CompTIA Security+ certification.

 * GIAC Information Security Professional (GISP) certification.

 * Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position.

Preferred Qualifications

 * Experience serving as a Security Control Assessor or supporting an independent assessment organization.

 * Experience assessing Low- and Moderate-impact federal systems.

 * Experience with HHS, NIH, or another federal civilian agency.

Physical Requirements

 * Ability to remain in a stationary position for extended periods while working at a computer.

 * Ability to communicate effectively through virtual and in-person meetings.

 * Ability to perform duties in an office, remote, or hybrid environment based on program requirements.

 * Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position.

## Description

* Plan and conduct independent security control assessments.

 * Develop Security Assessment Plans and test procedures.

 * Review security documentation and supporting control evidence.

 * Interview system personnel and evaluate control implementation.

 * Perform technical and procedural testing of applicable controls.

 * Document assessment findings and supporting evidence.

 * Develop Security Assessment Reports and risk statements.

 * Maintain organizational independence between assessment and system implementation functions.

 * Evaluate remediation evidence for identified deficiencies.

 * Coordinate assessment schedules and activities with system stakeholders.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Giving AI eyes: How to build a dashboard you can't see](https://www.wearedevelopers.com/videos/100193-giving-ai-eyes-how-to-build-a-dashboard-you-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)