Information Systems Security Officer (ISSO)

Swift•Laurel, MD

22h•Onsite

About The Position

The Swift Group is seeking an Information Systems Security Officer (ISSO) to join a growing team in Laurel, MD. The ISSO will support secure government environments and maintain the operational security posture of assigned systems, programs, and enclaves. The ISSO will be responsible for implementing and enforcing information security policies, managing system security throughout the lifecycle, supporting authorization activities, and ensuring compliance with DoD and NIST RMF requirements.

Requirements

Ten (10) years of experience as an Information Systems Security Officer (ISSO) supporting programs of similar scope, type, and complexity
Experience in at least two (2) of the following: Current security tools, Hardware/software security implementation, Communication protocols, Encryption techniques and tools
Experience supporting system security, change management, RMF, security authorization, and configuration management activities
Bachelor's degree in Computer Science or a related discipline from an accredited college or university
Four (4) additional years of ISSO experience may be substituted for a bachelor's degree
DoD 8570/8140 IAM Level I (or higher) certification required
US citizenship and an active TS/SCI with Polygraph security clearance required

Responsibilities

Maintain the operational security posture of assigned information systems and ensure compliance with established security policies, standards, and procedures
Support and manage the security aspects of systems through day-to-day security operations
Plan, coordinate, implement, and enforce information systems security policies, standards, and methodologies
Manage configuration changes to systems and assess the security impact of those changes
Support Risk Management Framework (RMF) activities, including security authorization and accreditation efforts
Prepare, review, and maintain security documentation including System Security Plans (SSPs), Risk Assessment Reports, Security Requirements Traceability Matrices (SRTMs), and authorization packages
Conduct vulnerability and risk assessments and recommend appropriate mitigation strategies
Evaluate security solutions to ensure compliance with requirements for processing classified information
Support configuration management of security-related hardware, software, and firmware
Collaborate with engineering and operational teams to resolve security findings and maintain compliance throughout the system lifecycle