What are the responsibilities and job description for the Information System Security Officer position at Southeastern Computer Consultants, Inc. (SCCI)?
|
|
Overview
SCCI is looking for an Information System Security Officer (ISSO) supporting Cybersecurity requirements. This position is in support of our Rapid Development Portfolio customer. The ISSO will work as part of a team to implement security controls and policies across a family of projects. A successful candidate possesses experience and knowledge in Assessment and Authorization (A&A) processes and procedures within the Risk Management Framework (RMF), as well as DISA Security Technical Implementation Guides (STIGs), certification and accreditation, and the administration and troubleshooting of tactical and non-tactical networks. This position is located in Dahlgren, VA.
Responsibilities:
- Provide dedicated Assessment and Authorization (A&A) support services as defined in the RMF for verification, validation, and post-accreditation
- Recognize and examine potential security violations to determine impact to security posture, assess the impact, preserve evidence, and take appropriate action to report the incident as required by regulation
- Perform validation assessments of implemented controls and maintain required documentation per RMF guidelines
- Assist in developing, maintaining or reviewing accreditation and authorization documentation such as the security plan, security assessment plan, and hardware and software diagrams
- Assist in developing, maintaining or reviewing business plans and procedures such as IT strategic plan, contingency plan, incident response plan, and standard operating procedures
- Manage and document the ATO/IATT package process through Enterprise Mission Assurance Support Service (eMASS)
- Oversee the Information Assurance Vulnerability Management (IAVM) plan ensuring timely compliance and reporting
- Collaborate with system administrators to conduct risk assessments, determine mitigation plans and creation of Plans of Action and Milestones (POA&M)
- Conduct the review and verification of Security Technical Implementation Guides (STIGs)
- Review and analyze Tenable Security Center and Nessus Assured Compliance Assessment Solution (ACAS) vulnerability scans
- Contribute and participate in various meetings including the Configuration Control Board (CCB)
- Perform problem resolution and adapt to changing technologies, processes, and organizational requirements
- Support decision-making authority affecting the availability and function of mission-critical system
Essential Skills and Experience:
- Must be a U.S. Citizen and able to obtain and maintain an Active Secret Security Clearance
- Bachelor's Degree (BS) in Computer Science, Information Technology, or related degree; or equivalent experience
- Minimum of five (5) years of experience in the field of IT
- Ability to achieve IAM Level 2 certification, per DOD 8570 (CISSP, CISM, GSLC, CASP, or CAP)
- Ability to effectively communicate verbally and in writing across all organizational levels
- Strong analytical skills and ability to assist other team members in problem solving
- Strong team player, able to work in a fast-paced, rapidly changing environment
Preferred Skills and Experience:
- Knowledge of DOD RMF processes
- Experience performing or assisting the duties of an ISSO
SCCI is committed to providing a comprehensive and competitive benefits package to meet the needs of employees and their families. EOE of Minorities, Females, Veterans, Disabilities.
