Senior Information Systems Security Officer

MANTECH•Washington, DC

1d•$141,500 - $236,000•Onsite

About The Position

MANTECH seeks a motivated, career and customer-oriented Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This is an on-site position. The Senior ISSO will leverage their strong technical background and knowledge to support accreditation efforts, to include creating Body of Evidence (BOE) documentation, responding to/implementing/documenting required controls, and completing required tasks and actions.

Requirements

10 + years of related information systems security experience, or a Master's degree with 7 + years of experience.
Bachelor's Degree or equivalent (6 additional years of experience).
Must possess one or more relevant industry certifications, such as CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, or GSLC.
Significant experience navigating technical accreditation processes, meeting strict security requirements, and creating A&A Body of Evidence (BOE) documentation.
Familiarity operating standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).
Proven experience managing complex network documentation, inventorying networks, and working across large technical teams to drive a standardized security agenda.
Current/Active TS/SCI Required.
Abilty to obtain and maintain a polygraph.

Nice To Haves

Cloud Certification.
Hands-on experience utilizing cyber risk and compliance automation tools.
Self-starter with excellent interpersonal skills, capable of organizing boards and driving change across organizational teams.

Responsibilities

Create, update, maintain, and interpret required Body of Evidence (BOE) documentation to navigate system accreditation processes.
Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of system security configurations and practices.
Conduct required vulnerability scans, review reports to identify vulnerabilities, and perform comprehensive vulnerability analysis.
Develop, oversee, and track Plans of Action and Milestones (POAMs) to effectively mitigate discovered security risks.
Coordinate with system owners, ISSMs, and team resources to diagnose operational issues and implement necessary technology solutions.
Document and implement plans detailing security postures, proper configurations, and secure remote access capabilities for applications.