Information System Security Officer

About the Role

Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations.

Responsible for security assessments of a variety of applications or domains, including cloud computing, and managing several large, complex, and high-risk projects or initiatives.

Responsibilities

• Implement security controls, conduct risk assessments, and document compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.
• Evaluate and support documentation, validation, and accreditation processes to ensure new and existing IT systems meet the organization's information assurance (IA) and security requirements.
• Ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
• Support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture is consistent, usable, secure, and adds value to the business.
• Utilize network and vulnerability scanning tools and technologies to interrogate systems for configuration and status.
• Apply security architecture principles and best practices to design, implement, and maintain secure IT infrastructures in alignment with Assessment & Authorization (A&A) policies.
• Utilize Governance, Risk, and Compliance (GRC) tools for managing A&A processes.
• Serve as a subject matter expert (SME) for the US Government Client A&A process, providing guidance to stakeholders, business units, and new A&A resources.
• Build and maintain schedules and step-by-step action plans.
• Collaborate with cross-functional teams, business units, stakeholders, and IT professionals, and brief executives.

Requirements

• A minimum of eight (8) years of relevant experience.
• A degree from an accredited college/university in the applicable field of services. If the degree is not in the applicable field, four additional years of related experience is required.
• Typically performs all functional duties independently.
• Special credentials (licenses and/or certifications) may be required at the task order level on a case-specific basis.
• Must pass a client-mandated clearance process, including drug screening, criminal history check, and credit check.
• Must be a US Citizen or permanent status Green Card holder.
• Cannot have more than 6 months of travel outside the United States within the last five years (military service excluded).
• All overtime must be pre-approved in writing by the client manager or designated representative.

Skills

• Strong organizational skills.
• Effective communication and collaboration skills.
• In-depth understanding of security architecture principles and best practices.

Additional Provisions

• Once a candidate's resume is approved and the interview passed, the agency is responsible for providing drug screening. Failure to submit drug screening results will delay the security clearance process.
• If granted an interim clearance, continuation of employment is contingent on receiving a sensitive clearance.
• Dress code is business casual: collared shirt with slacks for men, no skirts above the knee for women.
• Authorized overtime will be reimbursed at straight time.