Information Systems Security Officer (ISSO)

Swift•Laurel, MD

About The Position

Swift is seeking an Information Systems Security Officer to support secure government environments in Laurel, Maryland, and Annapolis Junction, Maryland. The role maintains the operational security posture of assigned systems, programs, and enclaves; implements and enforces information security policies; manages system security throughout the lifecycle; supports authorization activities; and ensures compliance with DoD and NIST Risk Management Framework requirements.

Requirements

Ten years of experience as an Information Systems Security Officer supporting programs of similar scope, type, and complexity.
Experience in at least two of the following: current security tools; hardware/software security implementation; communication protocols; encryption techniques and tools.
Experience supporting system security, change management, RMF, security authorization, and configuration management activities.
Bachelor's degree in Computer Science or a related discipline from an accredited college or university, or four additional years of ISSO experience in substitution.
DoD 8570/8140 IAM Level I or higher certification.
Computer proficiency, including navigating a Windows environment; managing files and folders; using common workplace applications such as Microsoft Office, Teams, and email; navigating web browsers; and independently troubleshooting routine issues.
U.S. citizenship.
Active TS/SCI with Polygraph security clearance.

Responsibilities

Maintain the operational security posture of assigned information systems and ensure compliance with established security policies, standards, and procedures.
Support and manage the security aspects of systems through day-to-day security operations.
Plan, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Manage configuration changes to systems and assess their security impact.
Support Risk Management Framework activities, including security authorization and accreditation efforts.
Prepare, review, and maintain security documentation, including System Security Plans, Risk Assessment Reports, Security Requirements Traceability Matrices, and authorization packages.
Conduct vulnerability and risk assessments and recommend mitigation strategies.
Evaluate security solutions for compliance with requirements for processing classified information.
Support configuration management of security-related hardware, software, and firmware.
Collaborate with engineering and operational teams to resolve security findings and maintain compliance throughout the system lifecycle.