Information Systems Security Officer

- Provide information assurance support to system(s) and program
- Demonstrated experience with coordinating and implementing cyber security policies, standards and processes
- Maintain operational security posture for system(s) through customized Risk Management Framework (RMF) to ensure established security processes and procedures are followed
- Strong knowledge of AWS infrastructure, Commercial cloud and cloud security
- Evaluate security solutions to ensure security requirements are met for processing classified information
- Provide configuration management and documentation for system software, hardware, networks, enclaves, etc.
- Prepare and review system documentation to include Systems Security Plans (SSPs), Certification and Accreditation (C&
A) packages, architecture diagrams, contingency plan, incident response plan, and other documentation
- Support programmatic and organization project and risk management review boards
- Perform vulnerability scanning, risk assessment analysis using NIST 800-53 and prepare responses to Plan of Action and Milestones (POA&
Ms)
Requirements
- Understanding of NIST 800-53, NIST 800-37, RMF, ICD 503
- Strong written and oral communication skills to write technical analysis reports and security plans
- Proficient the Risk Management Framework, as it relates to Operational Technology (OT) systems including NIST SP 800-82 OT specific recommendations and guidance
- Implementing and managing security control lifecycle for OT systems.
- Desired Certifications
- Comp TIA Security+
- Certified Information System Security Processional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Ethical Hacker (CEH)
- AWS Certified Cloud Practitioner (CCP)
- Microsoft Azure
- Google Cloud Platform (GCP)
- Security Clearance:
TS/SCI with FS Polygraph.
- Years of Experience:
2 years with a PhD
6 years with a BS degree.
4 years with a master’s degree
8 years with an AA degree
10 years with an HS diploma