Information System Security Officer, Senior (Top Secret)

Resource Management Concepts•Patuxent River, MD

14h•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking an Information Security Analyst to serve as an Information Security Systems Officer (ISSO) for their NAVAIR customer in Patuxent River, MD. The role involves performing various Information Assurance and Risk Management Framework (RMF) activities, including leading ISSO duties for a NAVAIR program, conducting risk assessments, and managing daily cybersecurity operations. The ISSO will also be responsible for developing and validating RMF authorization packages, preparing necessary documentation, and ensuring compliance with cybersecurity policies and control implementations. This includes conducting CyberSafe authorizations, implementing Cybersecurity Plans, performing Cyber Tabletop exercises, and managing asset and vulnerability data. The position requires collaboration with Subject Matter Experts (SMEs) for vulnerability assessments, system authorization, and evaluating software according to DITPR/DADMS requirements.

Requirements

A bachelor's degree and more than ten (10) years of relevant experience.
An active DoD TOP SECRET clearance is required to start.
May be subjected to a security investigation and must meet eligibility requirements for access to classified information.
Must meet the certification and clearance requirements established IAW the DoD Manual 8570-1M.
Must have one of the following certifications to start: CISM, CISSP (or Associate), GSLC.
Knowledgeable and proficient in Risk Management Framework (RMF) processes.
Knowledgeable and proficient in Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
Knowledgeable and proficient in IT systems and subsystems.
Knowledgeable and proficient in Rotary Aircraft systems.
Knowledgeable and proficient in Secure Operating Systems.
Knowledgeable and proficient in Project management.
Knowledgeable and proficient in Written and verbal communications.
Knowledgeable and proficient in Teamwork and collaboration.
Experience working on classified systems (i.e., SIPRNet) within secure environments.
Experience working on high-visibility or mission-critical aspects of a given program and performing all functional duties independently and as part of a team in NAVAIR environments.

Nice To Haves

An associate degree plus four (4) years of additional experience performing work related to the labor category functional description may be substituted for a Bachelor’s Degree.

Responsibilities

Serve as a Lead ISSO for a designated NAVAIR program.
Conduct Risk Assessments for US Navy RMF packages and provide recommendations to improve the Cyber Security posture through risk mitigation steps.
Manage day-to-day cybersecurity activities for the team, including the oversight of less senior staff and their assigned responsibilities.
Perform duties of the Risk Management Framework (RMF) ISSO role, including developing US Navy RMF authorization packages.
Perform validation activities for RMC authorization packages.
Prepare/Update RMF documentation.
Prepare IATTs and Use Case MFRs as required to support development and testing.
Prepare for CyberSafe authorization in parallel with the system authorizations.
Establish Cybersecurity policies IAW security control implementations.
Implement a Cybersecurity Plan.
Perform Cyber Tabletop exercises.
Perform asset and vulnerability management via VRAM reporting.
Perform vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
Perform system security assessments.
Evaluate and report software IAW DITPR/DADMS requirements.