Information System Security Officer* Atlantic City, NJ

InfiniSource Consulting Solutions, Inc.; Atlantic City (NJ); On-site; USD 110,000 - 150,000; Full time

Job summary

InfiniSource Consulting Solutions in Atlantic City, NJ seeks an experienced Information Systems Security Officer (ISSO) to ensure IS security compliance with FISMA RMF requirements. You will implement security controls, monitor systems, and coordinate with FBI security personnel to maintain ATO status.

The role requires TS clearance, 3+ years ISSO experience, and strong knowledge of NIST 800-series and related governance.

Qualifications

• Active TS clearance required.
• 3+ years ISSO experience.
• FISMA RMF, NIST 800-series, ICD 503, CNSS, FIPS, POA&M familiarity.
• Bachelor’s or advanced degree in CIS or related field (or equivalent).
• Ability to define project goals and work independently.
• Proficient with vulnerability/scanning tools and risk interpretation.
• Solid IT systems support background.
• Strong written and verbal communication.
• Proficient with Word, Excel, PowerPoint, Vision.

Responsibilities

• Ensure IS security compliance with FISMA RMF and NIST 800-53 controls.
• Oversee security configuration, monitoring, and maintenance of each information system.
• Liaise between LSU system owner and FBI information security personnel.
• Guide system engineering to bake-in security per FBI policies.
• Create PTA, PIA, CMP, CP, and IRP for each system as required.
• Track privileged user access to information systems.
• Conduct vulnerability scans and log analysis per risk parameters.
• Review and update POA&Ms.
• Retain audit logs per DOJ/ODNI/FBI policy.
• Report incidents to ISSM/CSO and implement protective measures.
• Participate as a security board member in Change Management.
• Ensure secure operation, maintenance, disposal per policy.
• Deliver security assessment docs acceptable on first government pass.

Skills

Active Top Secret Clearance

ISSO experience (3+)

Independent work

Verbal and written communication

Project goal definition

Education

Bachelors or advanced degree in Computer Information Systems or related field

Tools

Vulnerability scanning tools

Microsoft Office

Job description

All Jobs > Information System Security Officer* Atlantic City, NJ

Information System Security Officer* Atlantic City, NJ
Atlantic City

Description

InfiniSource Consulting Solutions

InfiniSource Consulting Solutions (ICS), a 150+ employee government contractor specializing in Management Consulting, Information Technology, and Professional Services to the federal government. We tailor our services to meet the specific needs of our civilian, defense, and private-industry sponsor. Our corporate support processes are ISO 9001 certified, giving our customers the confidence that we are continually measuring and improving upon the support we provide and are committed to the highest level of customer satisfaction.

SUMMARY

This position is for an experienced Information Systems Security Officer (ISSO) responsible for assuring compliance with all information system (IS) security requirements. The ISSO ensures proper assessment and implementation of security practices and procedures and validation of all security obligations toward meeting the Federal Information Security Modernization Act (FISMA) Risk Management Framework (RMF) requirements.

ESSENTIAL FUNCTIONS

• Ensure that Learning Systems Unit (LSU) adhere to Federal Information Assurance policies and procedures to acquire and maintain an Information System(s) Authorization to Operate (ATO) under the FISMA, by following NIST 800-53 guidelines and NIST 800-53a security controls assessment practices for all current and future systems.
• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system.
• Provide liaison support between the LSU system owner and other FBI info system security personnel.
• Guides LSU Operations/system engineering design and development toward a "baked-in" security approach using Information Assurance best practices, as well as FBI-specific policies and guidelines.
• Create and update the Privacy Threshold Analysis (PTA) and Privacy Impact Assessment (PIA), Configuration Management Plan (CMP), Contingency Plan (CP) and Incident Response Plan (IRP), as required for each system
• Responsible for keeping track of all privileged users accessing IS’s.
• Conduct required info system vulnerability scans and log analysis according to risk assessment parameters.
• Ensure that all system security Plan of Actions and Milestones (POA&Ms) are reviewed and updated.
• Ensure all information security audit logs are retained in accordance with DOJ, ODNI or FBI policy
• Report any information system security incidents to the Information Systems Security Manager (ISSM) and/or Chief Security Office (CSO), immediately, and initiate upon approval, any protective and corrective measures, required to be taken.
• Actively participate as a security board member in the Change Management Process
• Ensure all info systems are operated, maintained, and disposed of in accordance with security policies.
• Perform at a level where all information system security assessment documentation delivered to the government is accepted on 1st pass. The government criteria shall be based on administrative (grammar, spelling, punctuation, classifications markings, etc.) and technical review.

Requirements

QUALIFICATIONS

Required Skill and Experience:

• Bachelors or advanced degree in Computer Information Systems or related field; experience and/or appropriate certifications may be substituted for degree
• Active Top Secret Security Clearance (TS)
• 3+ years demonstrated experience as an ISSO
• Experience and expert knowledge with FISMA Systems, the RMF, NIST 800-series guidelines, Intelligence Community Directive 503 (ICD 503), Committee on National Security Systems (CNSS) Instructions, FIPS, SAA requirements and processes, Continuous Monitoring Framework experience, Plan of Action & Milestones (POA&M) policies and vulnerability/patch management
• Ability to define project goals and work independently to complete projects while adhering to the established schedule
• Proficient with vulnerability and scanning tools and well-versed in interpreting risk posture resulting from assessment reports
• A solid background in IT systems support
• A demonstrated ability to quickly and independently learn unfamiliar IT systems
• Demonstrated ability to effectively communicate both verbally and in writing
• Work on moderately complex assignments, using judgement to resolve problems/make recommendations
• Proficient with Microsoft products – Word, Excel, PowerPoint and Vision

InfiniSource Consulting Solutions is committed to hiring and retaining a diverse workforce We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. US Citizenship is required for most positions.