Information Systems Security Officer
Company | Leidos |
---|---|
Location | Annapolis Junction, MD, USA |
Salary | $104650 – $189175 |
Type | Full-Time |
Degrees | Bachelor’s |
Experience Level | Senior |
Requirements
- Bachelor of Science degree in Computer Science, Information Assurance, Information Security, or a related discipline, plus 7+ years of relevant experience. In lieu of a degree, an additional 4 years of experience may be considered on a case by case basis.
- 7+ years of ISSO experience supporting IC or DoD programs and contracts of similar scope, type, and complexity.
- Experience with customer Info Security tool suite
- DoD 8570 compliance with IAM Level II or IAT Level III (CASP, CISSP, or Associate).
- Must hold an active TS/SCI with Polygraph.
Responsibilities
- Enhancing security posture by supporting the program, organization, system, or enclave’s information assurance initiatives and enforcing security policies, standards, and methodologies.
- Overseeing security operations for information systems, managing daily security aspects, evaluating security solutions for classified processing, and conducting vulnerability and risk assessments for accreditation.
- Managing configuration and system integrity by administering configuration management (CM) for security software, hardware, and firmware, ensuring compliance with security controls, and assessing the impact of system changes.
- Developing and maintaining security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification & Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
- Ensuring compliance with security authorization activities following the Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF).
- Providing technical expertise in security policies and operations, supporting the implementation and maintenance of security measures, and collaborating with stakeholders to strengthen the security posture.
- Driving continuous improvement by assessing existing security processes, identifying vulnerabilities, and implementing proactive solutions to enhance system resilience.
Preferred Qualifications
-
No preferred qualifications provided.