Information Systems Security Officer - ISSO

SAIC•Chantilly, VA

About The Position

SAIC has an immediate opening for an Information Systems Security Officer (ISSO) to support a highly dynamic and growing program. You will be a part of a large multi-year contract that supports our customer in systems engineering and integration across a broad portfolio of projects. You will come into a program that enjoys a close working relationship with the customer, bringing exquisite technical expertise to bear on real world problems, helping the customer execute real world missions that impact National Security on a daily basis. This close relationship, along with the program's longevity (20 years), ensures that as a new team member you will find a depth of support to grow and develop that is unmatched, all while making a difference - daily. We need a highly motivated and experienced ISSO to support our cybersecurity initiatives and ensure the confidentiality, integrity, and availability of our information systems. The successful candidate will play a critical role in maintaining the security posture of our organization's IT infrastructure and ensuring compliance with applicable regulations and standards. The ISSO will work closely with the government client in establishing, certifying, and maintaining classified networks in support of the customer's intelligence enterprise.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field; experience can be substituted for the Bachelor's degree
Minimum of 7 years of experience in information security, with at least 2 years as an Information Systems Security Officer or a similar role
Strong knowledge of security frameworks and standards such as NIST, ISO 27001, and CIS Controls
Hands-on experience with security technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection
Knowledge of NIST and DoD policies and procedures
Excellent analytical, problem-solving, and decision-making skills
Strong communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders
Ability to work independently and manage multiple tasks and projects simultaneously

Nice To Haves

Professional security certifications such as CISSP, CISM, CISA, or equivalent are highly preferred
Qualified at the IAM Level II for the DoD Information Assurance Workforce
CompTIA Security+ or higher

Responsibilities

Develop, implement, and maintain security policies, procedures, and controls in accordance with organizational objectives and regulatory requirements
Conduct risk assessments and vulnerability assessments to identify and mitigate security risks
Manage Risk Management Framework (RMF) activities in accordance with NIST and customer policies and procedures
Monitor and analyze security alerts and incidents to identify potential threats and respond appropriately
Enforce security controls and manage the deployment of security technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection software
Lead incident response efforts and coordinate with relevant stakeholders to resolve security incidents
Prepare and maintain security documentation, including system security plans (SSPs), risk assessments, and security assessment reports (SARs)
Conduct regular security audits and assessments to ensure compliance with industry standards and best practices
Provide security training and awareness programs for staff to promote a culture of security within the organization
Collaborate with IT and business units to implement security measures and ensure secure systems development and deployment