Information System Security Officer, Senior (Top Secret/SCI)

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

About the role

The selected applicant will serve as an Information Security Systems Officer (ISSO) supporting our Navy customer in Patuxent River, MD. This role requires 100% onsite presence in a classified government facility.

Responsibilities

• Serve as a Lead ISSO for a designated NAVAIR program.
• Coordinate and develop Authorization to Operate (ATO) packages for upcoming boundaries that need to be authorized.
• Ensure systems comply with DoD security controls, Security Technical Implementation Guides (STIGs), and applicable policies.
• Track and document security-relevant changes to hardware, software, and firmware.
• Ensure hardware and software profiles exist for each boundary and are compliant.
• Manage day-to-day cybersecurity activities for the team, including oversight of a team of ISSOs and their assigned responsibilities.
• Create Memorandums for the Record (MFRs) for any major changes to the boundaries, submit these MFRs for review by the DAO, and sign off or send for approval Personal Electronic Device (PED) waivers.
• Perform duties of the Risk Management Framework (RMF) ISSO role, including:
  • Developing RMF authorization packages.
  • Performing validation activities for authorization packages.
  • Preparing/updating RMF documentation.
  • Preparing IATTs and Use Case MFRs as required to support development and testing.
  • Implementing a Cybersecurity Plan.
  • Performing weekly validation of auditing to ensure audits have been completed for each boundary.
  • Performing Cyber Tabletop exercises.
  • Performing asset and vulnerability management via VRAM reporting.
  • Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
  • Performing system security assessments.
  • Evaluating and reporting software in accordance with DITPR/DADMS requirements.

Requirements

• A bachelor's degree and more than ten (10) years of relevant experience are required. An associate degree plus four (4) years of additional experience may be substituted for a Bachelor's Degree.
• An active DoD TOP SECRET clearance is required to start, with the ability to move to SCI when program requirements dictate.
• The applicant may be subjected to a security investigation and must meet eligibility requirements for access to classified information.
• Must meet certification and clearance requirements established IAW the DoD Manual 8570-1M.
• Must have one of the following certifications to start:
  • CISM
  • CISSP (or Associate)
  • GSLC

Skills

• Risk Management Framework (RMF) processes.
• Cybersecurity/A&A tools (e.g., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
• IT systems and subsystems.
• Project management.
• Written and verbal communications.
• Teamwork and collaboration.
• Working on classified systems (e.g., SIPRNet) within secure environments.

Benefits

• Monday to Friday full-time day shift work.
• Paid relocation assistance.
• Competitive paid vacation package with 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401K package.
• Career growth opportunities, including training, certifications, education, and tuition assistance.

Pay

The salary range for this position is $140,000 - $180,000, determined by factors including location, education, knowledge, skills, competencies, experience, and contract-specific requirements.