Information Systems Security Officer 2

Columbia Technology Partners • Annapolis Junction, MD

1d • $130 - $150

About The Position

Columbia Technology Partners is seeking an experienced Information Systems Security Officer 2 to support the security and compliance of classified information systems. The role helps coordinate and maintain an information assurance program, supports certification and accreditation activities, manages system security documentation, and ensures security requirements are incorporated throughout the system lifecycle.

The ISSO supports senior security staff and program stakeholders in administering security controls across complex systems and environments. Work includes Risk Management Framework activities, vulnerability and risk assessments, security documentation, configuration management, user identification and authentication, continuous monitoring, and day-to-day security operations. The position may also serve as an Approval Authority for assigned information systems when required.

Applicants must be U.S. citizens, have an active security clearance with an appropriate polygraph, and meet the stated experience, education or substitution, and certification requirements. Employment is contingent upon successful completion of a security background investigation and polygraph; applicants and employees are subject to random drug testing.

Requirements

• Ten years of experience as an ISSO supporting programs or contracts of similar scope, type, and complexity.
• A bachelor's degree in Computer Science or a related technical discipline from an accredited college or university; four additional years of relevant ISSO experience may substitute for the degree.
• At least two years of experience in two or more of the following areas: security tools; hardware and software security implementation; communication protocols; encryption techniques and tools; security design; or Computer Science or related technical disciplines.
• Experience supporting certification and accreditation activities, vulnerability assessments, risk assessments, and continuous monitoring.
• Information Assurance Management Level I certification or higher; IAM Level I Certification Compliance is required.
• U.S. citizenship is required.
• An active Security Clearance with appropriate Polygraph is required.
• Successful completion of a security background investigation and polygraph is required for employment.
• Applicants and employees are subject to random drug testing in accordance with Executive Order 12564.

Nice To Haves

• Experience with NIST Risk Management Framework requirements and security controls.
• Working knowledge of configuration management and system change-impact assessments.
• Experience developing or maintaining System Security Plans, Risk Assessment Reports, accreditation documentation, and traceability matrices.
• Familiarity with security requirements applicable to classified information systems.
• Strong documentation, organization, coordination, and stakeholder communication skills.

Responsibilities

• Support senior ISSOs in implementing and enforcing information system security policies, standards, procedures, and methodologies.
• Assist with preparing, maintaining, and updating system security documentation, including System Security Plans and related information assurance materials.
• Evaluate security solutions to confirm they meet system requirements for processing classified information.
• Support Risk Management Framework activities, including security control implementation, Security Plans, Risk Assessment Reports, certification and accreditation packages, and System Requirements Traceability Matrices.
• Perform vulnerability and risk assessment analysis in support of system certification and accreditation.
• Maintain system security records, operational security posture, and day-to-day security operations.
• Provide configuration management support for information system hardware, software, and firmware.
• Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and other in-scope system components.
• Administer user identification and authentication mechanisms.
• Assist in managing system security and assessing the security impact of proposed changes.
• Plan and coordinate information technology security programs and policies.
• Provide security support to Information System Security Managers and other program stakeholders.
• Support continuous monitoring activities in accordance with applicable National Institute of Standards and Technology guidance.
• Serve as an Approval Authority for information systems under assigned control, when required.

Benefits

• Three medical plans with in-network and out-of-network options.
• Vision and dental coverage paid in full by CTP.
• 401(k) with a 6% company contribution.
• Paid time off and customizable leave plans, including jury duty, bereavement, and military leave.
• Up to $10,000 for approved career-related learning, training, education, and/or tuition.
• Life and AD&D insurance and short-term and long-term disability coverage at no cost to employees.
• Year-end profit-sharing bonus.
• Tiered referral bonus program with bonuses ranging from $7,000 to $20,000.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level