Information System Security Officer

Rdrinc • Chantilly, VA

14d

About The Position

This position is contingent upon award. Responsible for providing assistance with information system security and IT concerns utilizing routine information system security practices, policies, and technologies. Shall primarily maintain operational security posture for a program or information system as well as prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). The Intermediate Level Information System Security Officer shall be able to perform all the tasks and have all skills sets of an Entry Level Information System Security Officer and the following tasks: Controlling, labeling, virus scanning, and appropriately transferring data between information systems at varying classification levels Inspecting computer hardware prior to disposal Assessing and responding to security-related requests within various ticketing systems Analyzing new software requests Maintaining operational security posture for information systems Performing risk assessment analysis to support Assessment and Authorization (A&A) Preparing and reviewing documentation in accordance with ICD 503 Supporting industry partners with their A&A efforts

Requirements

• Bachelor’s degree and 3-7 years of ISSO experience or Master’s degree and 2-4 years of relevant experience or Associate’s degree and 6-11 years of relevant experience or High School Diploma/GED and 8 or more years of relevant experience
• Familiarity with information system security principles
• Ability to build rapport with military, civilian, and contractor personnel at all levels
• Knowledge of security-related IC an DoD policies, procedures and operating instructions
• Must obtain Security+ with in 6 months of start
• Must possess an active TS/SCI

Responsibilities

• Maintaining operational security posture for a program or information system
• Preparing and reviewing documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
• Controlling, labeling, virus scanning, and appropriately transferring data between information systems at varying classification levels
• Inspecting computer hardware prior to disposal
• Assessing and responding to security-related requests within various ticketing systems
• Analyzing new software requests
• Performing risk assessment analysis to support Assessment and Authorization (A&A)
• Preparing and reviewing documentation in accordance with ICD 503
• Supporting industry partners with their A&A efforts

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level