Information System Security Officer

Booz Allen Hamilton • Mclean, VA

90d • $55,200 - $126,000

About The Position

We're looking for an Information System Security Officer (ISSO) responsible for assessing and requesting client authorization for company-managed classified endpoints, servers, network, and security appliances. This involves applying evolving U.S. Government cybersecurity policy and guidance. The ISSO ensures system, network, and security appliance auditing, virus scanning, and hardware and software configuration management requirements are executed as defined in client-approved system assessment documentation and policy. Additionally, the ISSO monitors the activities of program system administrators to ensure all relevant security procedures are followed. The role also includes documenting clear and concise compliance criteria and test cases required to validate compliance with an evolving baseline of cybersecurity requirements and guidance from the National Institute of Standards and Technology (NIST), the Intelligence Community, and the DoD.

Requirements

• Experience applying security systems concepts, requirements, design development, implementation, and integration to information systems.
• Knowledge of the Risk Management Framework (RMF) and performing system assessment and authorization through a Governance, Risk, and Compliance (GRC) tool.
• Knowledge of risk mitigation and selecting and designing appropriate security controls for implementation.
• Knowledge of incident response and data loss prevention, detection, and response.
• Knowledge of NIST and Federal Information Security Management Act (FISMA) requirements for monitoring and reporting.
• TS/SCI clearance with a polygraph.
• HS diploma or GED.
• DoD 8570 IAM II Certification.

Nice To Haves

• Experience executing the analysis, design, and implementation of enterprise cybersecurity solutions.
• Experience maintaining vulnerability scanning tool compliance and patch management.
• Experience engineering and implementing security-based solutions to improve security posture.
• Possession of excellent written and verbal communication skills.
• DoD 8570 Certification such as CISSP, CISSP-ISSAP, or CISSP-ISSEP Certification.

Responsibilities

• Assess and request client authorization for company-managed classified endpoints, servers, network, and security appliances.
• Apply U.S. Government cybersecurity policy and guidance.
• Ensure system, network, and security appliance auditing, virus scanning, and hardware and software configuration management requirements are executed.
• Monitor activities of program system administrators to ensure compliance with security procedures.
• Document compliance criteria and test cases to validate compliance with cybersecurity requirements.

Benefits

• Health, life, and disability insurance.
• Financial and retirement benefits.
• Paid leave and professional development.
• Tuition assistance and work-life programs.
• Dependent care support.
• Recognition awards program for exceptional performance.

What This Job Offers

• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: High school or GED
• Number of Employees: 5,001-10,000 employees