Information System Security Officer (ISSO)

Parsons Corporation•Annapolis Junction, MD

1d•$148,300 - $266,900•Onsite

About The Position

Parsons is looking for a talented fully cleared Information Systems Security Officer (ISSO) to join our team. In this role you will get to support our expanding portfolio of work in the Intelligence Community (IC). As a collaborative member of a small and mostly autonomous team, this position directly supports secure enclave development networks.

Requirements

Bachelor’s degree in a technical discipline and 7+ years’ experience
Active Security + certification
Active TS/SCI w/Poly security clearance

Nice To Haves

Experience with Windows, Linux, VMware, and AWS.
Experience standing up SSPs.
Experience with SIPR

Responsibilities

Develop and maintain information security documentation such as System Security Plans (SSPs), Risk Assessment Plans, Implementation Plans, and Plans of Action & Milestones (POA&Ms).
Manage and control changes to the system and assess the security impact of those changes.
Consistently consult with RMF ISSE, ISSM, DAO & Development Team Engineers regarding operational security posture of information systems.
Support necessary compliance activities, e.g. ensure that system security configuration guidelines are followed, compliance with secure the enterprise (STE) and secure the network (STN) requirements.
Advise management on risk levels and security posture.
Advise appropriate leadership and the Authorizing Official of changes affecting the organization's cybersecurity posture.
Collect and maintain data needed to meet system cybersecurity reporting.
Ensure that security improvement actions are evaluated, validated, and implemented as required.
Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
Ensure that cybersecurity requirements are integrated into the continuity planning for each system and/or organization.
Identify alternative information security strategies to address organizational security objectives.
Identify information technology (IT) security program implications of new technologies or technology upgrades.
Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the cybersecurity program.
Manage the monitoring of information security data sources to maintain organizational situational awareness.
Participate in an information security risk assessment during the Security Assessment and Authorization process.
Participate in the development or modification of the system/network environment cybersecurity program plans and requirements.
Recognize a possible security violation and take appropriate action to report the incident, as required.
Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.
Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
Identify security requirements specific to an information technology (IT) system in all phases of the system life cycle.
Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
Support necessary compliance activities, e.g. ensure that system security configuration guidelines are followed, compliance with secure the enterprise (STE) and secure the network (STN) requirements.