Information Systems Security Officer 2

Columbia Technology Partners•Annapolis Junction, MD

About The Position

Columbia Technology Partners is seeking an experienced Information Systems Security Officer 2 to support the security and compliance of classified information systems. The role helps coordinate and maintain an information assurance program, supports certification and accreditation activities, manages system security documentation, and ensures security requirements are incorporated throughout the system lifecycle. The ISSO works with senior ISSOs, Information System Security Managers, and program stakeholders to administer security controls and maintain system security and operational readiness. The position supports Risk Management Framework activities, security control implementation, vulnerability and risk assessments, continuous monitoring, configuration management, user identification and authentication, and the assessment of security impacts from proposed changes. The role may serve as an Approval Authority for assigned information systems when required. Applicants must be U.S. citizens, hold an active security clearance with the appropriate polygraph, and complete a security background investigation and polygraph. Random drug testing applies. IAM Level I certification compliance is required. Columbia Technology Partners is a Service-Disabled Veteran Owned Small Business founded in 2007, specializing in technology and management consulting for corporations and federal agencies. The company describes its work as mission-focused and emphasizes collaboration, critical missions, competitive pay, and employee benefits. Salary ranges are informed by job responsibilities, market research, experience and qualifications, location, and company performance.

Requirements

Ten years of experience as an ISSO supporting programs or contracts of similar scope, type, and complexity.
A bachelor's degree in Computer Science or a related technical discipline from an accredited college or university; four additional years of relevant ISSO experience may substitute for the degree.
At least two years of experience in two or more of the following areas: security tools; hardware and software security implementation; communication protocols; encryption techniques and tools; security design; or Computer Science or related technical disciplines.
Experience supporting certification and accreditation activities, vulnerability assessments, risk assessments, and continuous monitoring.
Information Assurance Management Level I certification or higher; IAM Level I certification compliance is required.
U.S. citizenship.
An active Security Clearance with appropriate Polygraph.
Successful completion of a security background investigation and polygraph.
Applicants and employees are subject to random drug testing in accordance with Executive Order 12564.

Nice To Haves

Experience with NIST Risk Management Framework requirements and security controls.
Working knowledge of configuration management and system change-impact assessments.
Experience developing or maintaining System Security Plans, Risk Assessment Reports, accreditation documentation, and traceability matrices.
Familiarity with security requirements applicable to classified information systems.
Strong documentation, organization, coordination, and stakeholder communication skills.

Responsibilities

Support senior ISSOs in implementing and enforcing information system security policies, standards, procedures, and methodologies.
Prepare, maintain, and update system security documentation, including System Security Plans and related information assurance materials.
Evaluate security solutions to confirm that they meet system requirements for processing classified information.
Support Risk Management Framework activities, including security control implementation, Security Plans, Risk Assessment Reports, certification and accreditation packages, and System Requirements Traceability Matrices.
Perform vulnerability and risk assessment analysis in support of system certification and accreditation.
Maintain system security records, operational security posture, and day-to-day security operations.
Provide configuration management support for information system hardware, software, and firmware.
Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and other in-scope system components.
Administer user identification and authentication mechanisms.
Assist in managing system security and assessing the security impact of proposed changes.
Plan and coordinate information technology security programs and policies.
Provide security support to Information System Security Managers and other program stakeholders.
Support continuous monitoring activities in accordance with applicable National Institute of Standards and Technology guidance.
Serve as an Approval Authority for information systems under assigned control, when required.

Benefits

Three medical plans with in-network and out-of-network options.
Vision and dental coverage paid in full by CTP.
401(k) with a 6% company contribution.
Paid time off with customizable leave plans.
Jury duty, bereavement, and military leave.
Up to $10,000 for approved career-related learning, training, education, and/or tuition.
Life and AD&D insurance, short-term disability, and long-term disability at no cost to the employee.
End-of-year profit-sharing bonus.
Tiered referral bonus program with bonuses ranging from $7,000 to $20,000 if a referral joins the team.
Competitive pay.