Information Systems Security Officer

Booz Allen Hamilton•Fort Meade, MD

5d•$99,000 - $225,000

About The Position

Provide support for a program, organization, system, or enclave’s information assurance program proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed. Assist with the management of security aspects of the information system, perform day-to-day security operations of the system, and evaluate security solutions to ensure they meet security requirements for processing classified information. Perform vulnerability and risk assessment analysis to support certification, accreditation, and configuration management (CM) for information system security software, hardware, and firmware. Manage changes to the system and assess the security impact of those changes. Prepare and review documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs), and support security authorization activities in compliance with Information System Certification and Accreditation Process (ISCAP) and DoD Risk Management Framework (RMF).

Requirements

Experience supporting major federal information systems and applications
Experience with security tools, hardware, software security implementation, communication protocols, or encryption techniques and tools
Experience developing Risk Management products and working through system accreditations
Experience interfacing with information assurance managers, including reviewing documentation, SSPs, Risk Assessment Reports, C&A packages, or Plans of Action and Milestones (POA&Ms)
Experience working with XACTA IA Manager and Risk Management Frameworks
Experience with national security information system security requirements, including JSIG, ICD 503, DAAPM, or NISPOM
Experience in the oversight and execution of the Assessment and Authorization processes or C&A
TS/SCI clearance with a polygraph
Bachelor's degree and 10+ years of experience in Information Systems Security, or 14+ years of experience in Information Systems Security in lieu of a degree
DoD 8570 IAM Level I Certification

Responsibilities

Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Maintain operational security posture for an information system or program.
Ensure information systems security policies, standards, and procedures are established and followed.
Assist with the management of security aspects of the information system.
Perform day-to-day security operations of the system.
Evaluate security solutions to ensure they meet security requirements for processing classified information.
Perform vulnerability and risk assessment analysis to support certification, accreditation, and configuration management (CM) for information system security software, hardware, and firmware.
Manage changes to the system and assess the security impact of those changes.
Prepare and review documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
Support security authorization activities in compliance with Information System Certification and Accreditation Process (ISCAP) and DoD Risk Management Framework (RMF).