Information Systems Security Officer

Booz Allen Hamilton•Usa, MD

3d•Remote

About The Position

Provide support for a program, organization, system, or enclave’s information assurance program proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed. Assist with the management of security aspects of the information system, perform day-to-day security operations of the system, and evaluate security solutions to ensure they meet security requirements for processing classified information. Perform vulnerability and risk assessment analysis to support certification, accreditation, and configuration management (CM) for information system security software, hardware, and firmware. Manage changes to the system and assess the security impact of those changes. Prepare and review documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs), and support security authorization activities in compliance with Information System Certification and Accreditation Process (ISCAP) and DoD Risk Management Framework (RMF).

Requirements

Experience supporting major federal information systems and applications
Experience with security tools, hardware, software security implementation, communication protocols, or encryption techniques and tools
Experience developing Risk Management products and working through system accreditations
Experience interfacing with information assurance managers, including reviewing documentation, SSPs, Risk Assessment Reports, C&A packages, or Plans of Action and Milestones (POA&Ms)
Experience working with XACTA IA Manager and Risk Management Frameworks
Experience with national security information system security requirements, including JSIG, ICD 503, DAAPM, or NISPOM
Experience in the oversight and execution of the Assessment and Authorization processes or C&A
TS/SCI clearance with a polygraph
Bachelor's degree and 10+ years of experience in Information Systems Security, or 14+ years of experience in Information Systems Security in lieu of a degree
DoD 8570 IAM Level I Certification

Responsibilities

Proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
Maintaining operational security posture for an information system or program.
Assisting with the management of security aspects of the information system.
Performing day-to-day security operations of the system.
Evaluating security solutions to ensure they meet security requirements for processing classified information.
Performing vulnerability and risk assessment analysis to support certification, accreditation, and configuration management (CM).
Managing changes to the system and assessing the security impact of those changes.
Preparing and reviewing documentation, including System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
Supporting security authorization activities in compliance with Information System Certification and Accreditation Process (ISCAP) and DoD Risk Management Framework (RMF).