Information Systems Security Officer (ISSO)

GD Information Technology•Chantilly, VA

20h•Hybrid

About The Position

GDIT is seeking an Information Systems Security Officer (ISSO) in support of the Defense Information Systems Agency (DISA) Global Video Services (GVS) business area to enable and sustain the integration of video services into the Department of War. This position is a combination of remote (20%) and onsite (80%) support in Fort Meade, MD or Chantilly, VA. NOTE: This position is contingent upon contract award and task funding. MEANINGFUL WORK AND PERSONAL IMPACT This professional will play a crucial role in developing and maintaining System Security Plans (SSP) and creating and maintaining documentation required for ATO (Authorization to Operate) accreditation. This professional should exhibit experience in managing and automating the cyber security compliance and risk management process using DISA Enterprise Mission Assurance Support Service (eMASS) and strong familiarity with DoD and DISA Standard Operation Procedures (SOPs) for cyber security. HOW AN INFORMATION SYSTEMS SECURITY OFFICER WILL MAKE AN IMPACT: Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established IA standards and regulations, and recommend mitigation strategies Validate and verify system security requirements definitions and analysis and establishes system security designs Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements Build IA into systems deployed to operational environments Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application security policy and enterprise solutions Support the building of security architecture Enforce the design and implementation of trusted relations among external systems and architectures Assess and mitigate system security threats/risks throughout the program life cycle Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations Work closely with existing GDIT Cyber Team within the DISA Portfolio to ensure quality consistency and knowledge sharing WHAT YOU’LL NEED TO SUCCEED - REQUIRED: Security clearance: Active Secret Certification: DoD 8570 IAT/IAM II certification (Security+ CE, or similar) Education : Bachelor of Science in Computer Science, or equivalent experience in lieu of degree. Experience : 8+ years of related experience Technical skills: Experience in developing and reviewing Authorization packages and artifacts Experience in evaluating security solutions to ensure they meet security requirements for processing classified information Prior Defense experience, preferably with DISA or similar agencies Expert knowledge of cloud cybersecurity technology principles, methods, and techniques, as well as knowledge of the associated hardware, software, and equipment Knowledge of the Defense Risk Management Framework (RMF) processes, Federal Information Security Management Act (FISMA), etc. Experience with ACAS, STIGs, and HBSS Experience with Azure Cloud services and cybersecurity requirements Expertise in cybersecurity programs, policies, and implementation in support of Defense and its Combatant Commands, Services, and Agencies (CC/S/As) Strong familiarity with Defense and DISA SOPs for cybersecurity, including understanding the guidelines and procedures for maintaining compliant security postures Proper knowledge and technical expertise relevant to the Computing Environment (CE) requiring support Extensive experience with DISA eMASS for managing and automating the cybersecurity compliance and risk management process Proficient in leveraging eMASS to support A&A activities and maintaining detailed records of system security postures Skills and Abilities: Ability to thrive in a highly collaborative, fast-paced, growth-focused environment Ability to work collaboratively in a team environment Strong analytical, problem-solving, and decision-making skills Excellent written and verbal communication skills Location : Report onsite 3-4 days a week in either Fort Meade, MD or Chantilly, VA GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do. ● Growth: AI-powered career tool that identifies career steps and learning opportunities ● Support: An internal mobility team focused on helping you achieve your career goals ● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off ● Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters. The likely salary range for this position is $147,292 - $199,278. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% T elecommuting Options: Hybrid Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc . Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Requirements

Security clearance: Active Secret
Certification: DoD 8570 IAT/IAM II certification (Security+ CE, or similar)
Education : Bachelor of Science in Computer Science, or equivalent experience in lieu of degree.
Experience : 8+ years of related experience
Technical skills: Experience in developing and reviewing Authorization packages and artifacts
Experience in evaluating security solutions to ensure they meet security requirements for processing classified information
Prior Defense experience, preferably with DISA or similar agencies
Expert knowledge of cloud cybersecurity technology principles, methods, and techniques, as well as knowledge of the associated hardware, software, and equipment
Knowledge of the Defense Risk Management Framework (RMF) processes, Federal Information Security Management Act (FISMA), etc.
Experience with ACAS, STIGs, and HBSS
Experience with Azure Cloud services and cybersecurity requirements
Expertise in cybersecurity programs, policies, and implementation in support of Defense and its Combatant Commands, Services, and Agencies (CC/S/As)
Strong familiarity with Defense and DISA SOPs for cybersecurity, including understanding the guidelines and procedures for maintaining compliant security postures
Proper knowledge and technical expertise relevant to the Computing Environment (CE) requiring support
Extensive experience with DISA eMASS for managing and automating the cybersecurity compliance and risk management process
Proficient in leveraging eMASS to support A&A activities and maintaining detailed records of system security postures
Skills and Abilities: Ability to thrive in a highly collaborative, fast-paced, growth-focused environment
Ability to work collaboratively in a team environment
Strong analytical, problem-solving, and decision-making skills
Excellent written and verbal communication skills

Responsibilities

Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established IA standards and regulations, and recommend mitigation strategies
Validate and verify system security requirements definitions and analysis and establishes system security designs
Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protection/classification requirements
Build IA into systems deployed to operational environments
Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application security policy and enterprise solutions
Support the building of security architecture
Enforce the design and implementation of trusted relations among external systems and architectures
Assess and mitigate system security threats/risks throughout the program life cycle
Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations
Work closely with existing GDIT Cyber Team within the DISA Portfolio to ensure quality consistency and knowledge sharing

Benefits

Comprehensive benefits and wellness packages
401K with company match
paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
short and long-term disability benefits
life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume