Information Security Specialist

MRI Global • Charlottesville, VA

8d

About The Position

Responsible for overseeing the compliance of MRIGlobal’s information systems according to applicable Government and client requirements. Responsible for writing and maintaining compliant System Security Plans (SSPs) and Plan of Actions and Milestones (POA&Ms) that support the certification and accreditation process according to the Risk Management Framework for both Government and commercial requirements.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or other related disciplines with a minimum of 6 years relevant experience (or) High school diploma or equivalent with a minimum of 12 years relevant experience. Experience and certifications may be substituted for degree.
• Must be a US Citizen
• Ability to obtain and maintain required U.S. Government security clearances
• Written and maintained System Security Plans (SSPs) and Plan of Actions and Milestones (POA&Ms)
• Familiar with one or more of the following: NIST Risk Management Framework, CMMC (Cybersecurity Maturity Model Certification) Level 3 or higher, NIST SP 800-53 (Security and Privacy Controls for Federal Information Systems and Organizations), NIST SP 800-171 (Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations)

Nice To Haves

• Professional certifications such as CISSP or CISA are preferred

Responsibilities

• Oversees day-to-day regulatory compliance of the institute’s information systems
• Supports MRIGlobal’s classified programs through the maintenance and accreditation of operational classified information systems for Federal Government clients in accordance with NISPOM standards and in coordination with the Security Department
• Supports the selection, implementation, and maintenance of cybersecurity tools to provide MRIGlobal’s Cyber Incident Response Team with information necessary to determine root cause and remediation tactics for a cyber-incident
• Supports MRIGlobal’s Technical Divisions by planning, designing, and implementing secure systems to meet contractual and regulatory requirements, and provides information security consulting services to staff to ensure compliance with regulatory and client-specific requirements
• Supports the writing and maintaining MRIGlobal’s security policies including support the security posture of all cloud hosted systems
• Partners and coordinates with the IT department to provide security direction
• Analyzes information systems to ensure regulatory compliance.
• Safeguard networks against unauthorized modification, destruction, or disclosure.
• Research, evaluate, design, test, recommend, communicate, and implement new security software or devices

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level