Information System Security Officer

SMS Data Products Group, Inc.; Sumter (SC); On-site; USD 110,000 - 160,000; Full time

Job summary

SMS Data Products Group, Inc. is seeking a Senior Information System Security Officer (ISSO) to support the ISSM in protecting DoD information systems and coordinating RMF documentation.

You will help develop accreditation packages, evaluate network security controls, and track security events while ensuring compliance with DoD directives. Expect travel and coordination with CONUS/OCONUS stakeholders as required.

Qualifications

• B.S. in a related field or equivalent information security experience.
• Experience implementing system security measures per RMF and NIST CSF.
• Understanding of DoD policies and security directives.

Responsibilities

• Support the ISSM by conducting research, analysis, and RMF documentation.
• Evaluate network architectures for accreditation and certification procedures.
• Process and track security events and assist with documentation for AO review.

Skills

Firewall experience

RMF knowledge

NIST CSF

DoD policies

Education

B.S. in related field

Job description

The Senior Information System Security Officer (ISSO) supports the Information System Security Manager (ISSM) in protecting and accrediting mission-critical Air Force and Department of Defense information systems. This position conducts cybersecurity research and analysis, develops Risk Management Framework (RMF) and Cross Domain Solution accreditation documentation, evaluates network architectures and security exception requests, and implements applicable DoD, DISA, CSSP, USCENTCOM, and Authorizing Official requirements. The Senior ISSO also maintains security records and approved-product libraries, tracks and reports security events, interprets information assurance policies, and provides IT management, reporting, briefing, training, and CONUS/OCONUS travel support as required.

AFCENT's mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT's theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission.

Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Job Responsibilities

• Assist the ISSM by conducting research, analysis, and creating documentation in support of the RMF process.
• Analyze, evaluate and recommend the application of Air Force systems accreditation and certification procedures for existing and planned network architectures.
• Research, process and recommend approval of Firewall and Bluecoat Exception Requests.
• Process requests for removable media.
• Complete accreditation documents as outlined by DISA Risk Management Framework (RMF), Cybersecurity Service Provider (CSSP), USCENTCOM, and Authorizing Official (AO) guidance.
• Maintain Enterprise Products List (EPL) and Accreditation Library for all approved products and systems and evaluate service level agreements.
• Prepare and process accreditation documents for Cross Domain Solutions.
• Research, analyze and document Information Assurance and Security polices and assist with interpretation of local policies.
• Track, document, and report all security related events and prepare relevant documentation for ISSM and AO review.
• Implement and enforce DoD Information System, Platform Information Technology (PIT) systems cybersecurity policies and procedures as defined by relevant cybersecurity-related documentation.
• Provide General IT Management support.
• Provide documentation/reports support as required.
• Provide meetings/briefings support as required.
• Provide functional training support as required.
• Provide OCONUS deployment/TDY travel support as required.
• Provide CONUS TDY support as required.

Required Qualifications

• B.S. in related field and 5 or more years' relevant Information Security experience; or, 7 or more years' relevant Information Security experience.
• Firewall experience
• Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
• Must possess experience and demonstrate an understanding of Risk Management Framework, National Institute of Technology and Standards (NIST) Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices.

Certifications Required

• CISSP

• ITIL Foundation (candidate has up to 60 days to acquire ITIL Foundation certification)

Clearance Required

• Department of Defense TS/SCI

SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.