Information Assurance

HN Consulting•Chantilly, VA

About The Position

HN Consulting LLC is seeking an Information Assurance professional to conduct security assessments of system security plans, ensuring they meet stated security requirements. This role involves assessing the effectiveness of management, operational, and technical security controls, ensuring compliance of IT system security configurations, and developing clear processes for their implementation. The position supports the risk management process by assigning risk impact ratings and aiding in the development and maintenance of Plans of Action and Milestones (POA&Ms) within the Risk Management Framework (RMF). Responsibilities include assessing the severity of weaknesses, recommending corrective actions, and preparing security assessment reports. The role requires multi-tasking capabilities, advising other application development staff on Information Assurance for Information Security Officers (ISSO) standards, and serving as the primary contact and technical advisor to clients and application developers throughout the software and project management lifecycles. Extensive knowledge of US Government Information Assurance Security Processes is essential. Familiarity with Security Technical Implementation Guide (STIG) and Security Readiness Review (SRR) is desired, as is knowledge of Information Assurance policies, procedures, and processes.

Requirements

Familiarity with FISMA processes, NIST guidance, and experience writing security controls.
A minimum of 6 years of relevant/relatable experience is desired.
Security Clearance: Top Secret/SCI and/or Poly

Nice To Haves

Familiarity with the Security Technical Implementation Guide (STIG) and Security Readiness Review (SRR) is desired.
Knowledge of Information Assurance policies and procedures, and processes are also desired.
Hands-on experience and at least one of the following professional certifications: Security+, CISSP, CISA, GSEC, or GSLC & OS Certificates.

Responsibilities

Conduct security assessments of system security plans to ensure they provide security controls for information systems that meet stated security requirements.
Conduct comprehensive assessments of management, operational, and technical security controls to determine their overall effectiveness.
Ensure compliance of security configurations for IT systems and aid in providing clear and concise processes and procedures for their implementation and enforcement.
Support the risk management process by determining and assigning risk impact ratings in accordance with ISSO standards, guidelines, and methodologies.
Aid in the development and maintenance of Plans of Action and Milestones (POA&Ms) for IT systems identified in the RMF process and annual security assessments.
Provide assessments of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions.
Prepare security assessment reports containing the results and findings from system security assessments.
Multi-task capability, handling multiple projects.
Serve as advisor for other application development staff to ensure ISSO standards are adhered.
Serve as primary contact and technical advisor to clients and application developers to provide established ISSO standards during and post software development lifecycle and project management lifecycle.
Possess extensive knowledge of the US Government Information Assurance Security Processes.