Information System Security Officer

PlanIT Group, LLC; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

PlanIT Group, LLC in Reston, VA is seeking a seasoned security professional to lead assessments of threats and vulnerabilities across applications and cloud domains, determine deviations from policy, and assess risk. The role focuses on delivering mitigation recommendations in both operational and non-operational contexts.

You will implement security controls, perform risk assessments, and document compliance per NIST RMF and ISO standards, while supporting A&A processes, governance tools, and

Qualifications

• Eight years of relevant experience.
• Degree from accredited college/university in the applicable field; if not, four additional years of related experience.
• Typically performs all functional duties independently.
• Special credentials (licenses and/or certifications) may be required at the Task Order level.

Responsibilities

• Conduct security assessments and determine deviations from policy.
• Assess risk levels and develop mitigation countermeasures.
• Implement security controls and document compliance per NIST RMF and ISO standards.
• Evaluate documentation and accreditation processes to ensure IT systems meet IA and security requirements.
• Support development of security blueprints, models, designs, standards, and guidelines for secure enterprise IT.
• Use network and vulnerability scanning tools to interrogate systems for configuration and status.
• Serve as SME for the US Government A&A process and advise stakeholders as needed.
• Maintain schedules and action plans; communicate with cross-functional teams and executives.

Skills

Security assessments

Cloud computing

Risk assessments

NIST RMF

ISO standards

A&A processes

GRC tools

Network scanning tools

Vulnerability scanning tools

Security architecture

Education

Bachelor's degree in related field

Tools

GRC tools

Network scanners

Vulnerability scanners

Job description

Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations.

Task Description And/or Any Specific Requirements

• Ability to manage responsibility for security assessments of a variety of applications or domains, to include cloud computing, and to manage several project/initiatives of large size, complexity, and risk.


• Demonstrated proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.


• Demonstrated proficiency in successfully evaluating and supporting documentation, validation, and accreditation processes necessary to assure that new and existing information technology (IT) systems meet the organization's information assurance (IA) and security requirements.


• Demonstrated proficiency in ensuring appropriate treatment of risk, compliance, and assurance from internal and external perspectives.


• Demonstrated ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.


• Experience with network and vulnerability scanning tools and technologies to interrogate systems for configuration and status.


• In-depth understanding of security architecture principles and best practices to design, implement, and maintain secure IT infrastructures in alignment with A&A policies.


• Demonstrated proficiency in utilizing Governance, Risk, and Compliance (GRC) tools for managing Assessment & Authorization (A&A) processes.


• Ability to serve as subject matter expert (SME) for the US Government Client A&A process, including providing guidance to stakeholders, business units, and new A&A resources as necessary.


• Strong organizational skills and ability to build and maintain schedules and step-by-step action plans.


• Effective communication and collaboration skills to work with cross-functional teams, business units, stakeholders, and IT professionals, and to brief executives.

Experience/Education

• A minimum of eight (8) years' relevant experience.


• A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required.


• Typically performs all functional duties independently.


• Note: Special credentials (licenses and/or certifications) may be required at the Task Order level on a case-specific basis.

Additional Provisions

• Pass a client mandated clearance process to include drug screening, criminal history check and credit check.


• Once candidate's resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process.


• If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance.


• All candidates must be a US Citizen or permanent status Green Card holder.


• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)


• All overtime must be pre-approved in writing by the client manager or his/her designated representative.


• Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time.


• The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women.