Information System Security Officer 2

Uncover; Annapolis (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

ProSync Technology Group, LLC seeks a Senior ISSO to support information assurance for a DoD/IC program. The role involves enforcing security policies, maintaining the system security posture, and performing risk assessments to ensure compliance with NIST RMF.

The candidate will prepare and review SSPs, RMF documentation, and C&A packages, while coordinating with stakeholders to implement secure configurations and continuous monitoring.

Qualifications

• Active Top Secret SCI with Full Scope Polygraph required.
• Experience supporting DoD/IC programs preferred.
• Strong knowledge of information security standards and risk management.

Responsibilities

• Assist with proposing, coordinating, implementing and enforcing security policies and standards.
• Maintain security posture for information systems and ensure procedures are followed.
• Manage day-to-day security operations and assess security impacts of changes.
• Perform vulnerability risk assessments to support certification and accreditation.
• Provide CM for security software, hardware and firmware; review SSPs and A&A packages.

Skills

Information Assurance

Security Policies

Vulnerability Assessment

Configuration Management

NIST RMF

Job description

*This position requires an Active Top Secret SCI with Fullscope Polygraph clearance to be considered.*

ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community.

If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible,"

The Senior Information Systems Security Officer (ISSO) will provide support for a program, organization, system, or enclaves information assurance program.

• Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
• Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.
• Assists with the management of security aspects of the information system and performs day-to-day security operations of the system.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Performs vulnerability risk assessment analysis to support certification and accreditation.
• Provides configuration management (CM) for information system security software, hardware, and firmware.
• Manages changes to system and assesses the security impact of those changes.
• Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Supports security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NISTRMF).