Information System Security Officer, Senior (Secret)

Resource Management Concepts, Inc.•Patuxent River, MD

8h•$140,000 - $180,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Information Security Analyst to serve as an Information Security Systems Officer (ISSO) for a Navy customer in Patuxent River, MD. The role involves performing Information Assurance and Risk Management Framework (RMF) activities, including leading ISSO duties for a NAVAIR program, coordinating Authorization to Operate (ATO) packages, and ensuring system compliance with DoD security controls, STIGs, and policies. The position also includes tracking security-relevant changes, managing daily cybersecurity activities, overseeing a team of ISSOs, and creating Memorandums for the Record (MFRs). The ISSO will also develop RMF authorization packages, perform validation activities, prepare RMF documentation, implement Cybersecurity Plans, validate auditing, conduct Cyber Tabletop exercises, manage asset and vulnerability through VRAM reporting, perform vulnerability assessments and system authorization activities in collaboration with SMEs, and evaluate software IAW DITPR/DADMS requirements.

Requirements

A bachelor's degree and more than ten (10) years of relevant experience are required. An associate degree plus four (4) years of additional experience performing work related to the labor category functional description may be substituted for a Bachelor’s Degree.
An active DoD SECRET clearance is required to start.
Must meet eligibility requirements for access to classified information.
Must meet the certification and clearance requirements established IAW the DoD Manual 8570-1M.
Must have one of the following certifications to start: CISM, CISSP (or Associate), GSLC.
Knowledgeable and proficient in Risk Management Framework (RMF) processes.
Knowledgeable and proficient in Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
Knowledgeable and proficient in IT systems and subsystems.
Knowledgeable and proficient in Project management.
Knowledgeable and proficient in Written and verbal communications.
Knowledgeable and proficient in Teamwork and collaboration.
Experience working on classified systems (i.e., SIPRNet) within secure environments.

Responsibilities

Serving as a Lead ISSO for a designated NAVAIR program.
Coordinating and developing Authorization to Operate (ATO) packages for upcoming boundaries that need to be authorized.
Ensuring systems comply with DoD security controls, Security Technical Implementation Guides (STIGs), and applicable policies.
Tracking and documenting security-relevant changes to hardware, software, and firmware.
Ensuring Hardware and software profiles exist for each boundary are compliant.
Managing day-to-day cybersecurity activities for the team, including the oversight of team of ISSOs and their assigned responsibilities.
Creating Memorandums for the Record (MFRs) for any major changes to the boundaries and submitting these MFRs for review by the DAO.
Developing RMF authorization packages.
Performing validation activities for authorization packages.
Preparing/Updating RMF documentation.
Preparing IATTs and Use Case MFRs as required to support development and testing.
Implementing a Cybersecurity Plan.
Performing weekly validation of auditing to ensure audits have been completed for each boundary.
Performing Cyber Tabletop exercises.
Performing asset and vulnerability management via VRAM reporting.
Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
Performing system security assessments.
Evaluating and reporting software IAW DITPR/DADMS requirements.