Information Security & IT Risk Officer

Mantis Security Corporation; Reston (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Mantis Security Corporation in Reston, VA seeks an experienced Information Systems Security Officer (ISSO) to lead the Assessment and Authorization (A&A) across multiple analytic mission systems.

You will generate and maintain the complete security BoE and guide RMF processes per NIST standards, ICD 503, CNSSI-1253, and RMF controls.

Qualifications include a Bachelor’s with 9+ years or equivalent, and DoD 8570 IAT Level II certifications such as CCNA Security, CySA+, GSEC, or Security+ CE.

Qualifications

• Experience with A&A and RMF for multiple information systems.
• Familiarity with NIST 800-53 security controls and related RMF processes.
• Demonstrated ability to produce and maintain security artifacts.

Responsibilities

• Lead A&A activities and RMF processes for multiple analytic mission systems.
• Create and maintain SSP, Security CONOPS, STP, and procedures.
• Document implementation details of NIST 800-53 controls and guide assessments.
• Provide guidance on security policy and verify documentation adequacy.
• Manage POA&M with project teams to mitigate findings.

Skills

A&A RMF guidance

RMF process leadership

NIST 800-53 controls

Security policy guidance

Education

Bachelor’s degree (or higher)

Tools

SSP documentation

STP & Security Test Procedures

POA&M management

Job description

Mantis Security is seeking for immediate placement a highly qualified and technical Information Systems Security Officer (ISSO) to lead the Assessment and Authorization (A&A) for multiple analytic mission systems. The ISSO must be proficient in standard A&A activities, and will generate and maintain the complete security body of evidence (BoE) while leading the A&A activities according to the Risk Management Framework (RMF).

Responsibilities

• Support to the Assessment and Authorization (A&A) and all Risk Management Framework (RMF) processes (ICD 503, CNSSI-1253, NIST 800-37, NIST 800-53, etc.) for all multiple information systems
• Create and maintain System Security Plan (SSP), Security CONOPS, Security Test Plan (STP) and Security Test Procedures, document and maintain implementation details of NIST 800-53 security controls
• Plans and performs security functional testing, creates and maintains STPs, supports security assessments
• Provide guidance on the application of security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation
• Manage the plan of action and milestones (POA&Ms) by working with project managers and engineers to develop schedules and engineering actions that mitigate open findings

Qualifications

• Bachelor’s degree with 9 years of experience, or Master’s degree with 7 years of experience, or no degree with 13 years of experience
• DoD 8570 IAT Level II certification requirements (one of CCNA Security, CySA+, GICSP, GSEC, Security+ CE, or SSCP)

We offer employees the chance to work with great people on projects of high importance and are committed to providing the best culture that foster’s technical innovation and personal growth. To help our staff achieve a productive work-life balance, we offer a full range of highly competitive benefits for our employees and their families. For more information visit our website at