Information System Security Officer* Atlantic City, NJ

InfiniSource Consulting Solutions, Inc.; Atlantic City (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

InfiniSource Consulting Solutions (ICS) seeks an experienced Information Systems Security Officer (ISSO) to ensure compliance with all information system security requirements under the FISMA RMF framework.

You will oversee security controls, create PTA/PIA, and coordinate with FBI security personnel while applying NIST guidelines and CNSS instructions. A TS clearance and 3+ years ISSO experience are required, with strong communication and independent work abilities.

Qualifications

• Bachelor's or advanced degree in Computer Information Systems or related field.
• Active Top Secret Security Clearance (TS).
• 3+ years demonstrated experience as an ISSO.
• Experience with FISMA systems, RMF, NIST 800-series guidelines, ICD 503, CNSS instructions, FIPS, POA&Ms, vulnerability management.
• Ability to define project goals and work independently to complete projects.
• Proficient with vulnerability scanning tools and interpreting risk from assessment reports.
• Solid background in IT systems support.
• Demonstrated ability to learn unfamiliar IT systems quickly and independently.
• Excellent verbal and written communication skills.
• Proficient with Microsoft Word, Excel, PowerPoint and Vision.

Responsibilities

• Ensure LSU adheres to Federal Information Assurance policies and maintains ATO under FISMA by following NIST 800-53 guidelines.
• Oversee security configuration, monitoring, and maintenance of each information system.
• Provide liaison between LSU system owner and FBI info system security personnel.
• Guide design and development toward a baked-in security approach in line with FBI policies.
• Create and update PTA, PIA, CMP, CP and IRP as required for each system.
• Track all privileged users accessing ISs and ensure proper governance.
• Conduct vulnerability scans and log analysis per risk parameters.
• Review and update POA&Ms and ensure audit logs retention per policy.
• Report information security incidents to ISSM/CSO and initiate protective measures.
• Participate in Change Management as a security board member.
• Ensure secure operation, maintenance and disposal of information systems.

Skills

Strong communication

Independent worker

Analytical reasoning

Education

Bachelor's or advanced degree in Computer Information Systems

Tools

Vulnerability scanning tools

Microsoft Office

Job description

InfiniSource Consulting Solutions

InfiniSource Consulting Solutions (ICS), a 150+ employee government contractor specializing in Management Consulting, Information Technology, and Professional Services to the federal government. We tailor our services to meet the specific needs of our civilian, defense, and private-industry sponsor. Our corporate support processes are ISO 9001 certified, giving our customers the confidence that we are continually measuring and improving upon the support we provide and are committed to the highest level of customer satisfaction.

Summary

This position is for an experienced Information Systems Security Officer (ISSO) responsible for assuring compliance with all information system (IS) security requirements. The ISSO ensures proper assessment and implementation of security practices and procedures and validation of all security obligations toward meeting the Federal Information Security Modernization Act (FISMA) Risk Management Framework (RMF) requirements.

Description

InfiniSource Consulting Solutions (ICS), a 150+ employee government contractor specializing in Management Consulting, Information Technology, and Professional Services to the federal government. We tailor our services to meet the specific needs of our civilian, defense, and private-industry sponsor. Our corporate support processes are ISO 9001 certified, giving our customers the confidence that we are continually measuring and improving upon the support we provide and are committed to the highest level of customer satisfaction.

This position is for an experienced Information Systems Security Officer (ISSO) responsible for assuring compliance with all information system (IS) security requirements. The ISSO ensures proper assessment and implementation of security practices and procedures and validation of all security obligations toward meeting the Federal Information Security Modernization Act (FISMA) Risk Management Framework (RMF) requirements.

Essential Functions

• Ensure that Learning Systems Unit (LSU) adhere to Federal Information Assurance policies and procedures to acquire and maintain an Information System(s) Authorization to Operate (ATO) under the FISMA, by following NIST 800-53 guidelines and NIST 800-53a security controls assessment practices for all current and future systems.
• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system.
• Provide liaison support between the LSU system owner and other FBI info system security personnel.
• Guides LSU Operations/system engineering design and development toward a baked-in security approach using Information Assurance best practices, as well as FBI-specific policies and guidelines.
• Create and update the Privacy Threshold Analysis (PTA) and Privacy Impact Assessment (PIA), Configuration Management Plan (CMP), Contingency Plan (CP) and Incident Response Plan (IRP), as required for each system
• Responsible for keeping track of all privileged users accessing IS's.
• Conduct required info system vulnerability scans and log analysis according to risk assessment parameters.
• Ensure that all system security Plan of Actions and Milestones (POA&Ms) are reviewed and updated.
• Ensure all information security audit logs are retained in accordance with DOJ, ODNI or FBI policy
• Report any information system security incidents to the Information Systems Security Manager (ISSM) and/or Chief Security Office (CSO), immediately, and initiate upon approval, any protective and corrective measures, required to be taken.
• Actively participate as a security board member in the Change Management Process
• Ensure all info systems are operated, maintained, and disposed of in accordance with security policies.
• Perform at a level where all information system security assessment documentation delivered to the government is accepted on 1st pass. The government criteria shall be based on administrative (grammar, spelling, punctuation, classifications markings, etc.) and technical review.

Requirements

QUALIFICATIONS

• Bachelors or advanced degree in Computer Information Systems or related field; experience and/or appropriate certifications may be substituted for degree
• Active Top Secret Security Clearance (TS)
• 3+ years demonstrated experience as an ISSO
• Experience and expert knowledge with FISMA Systems, the RMF, NIST 800-series guidelines, Intelligence Community Directive 503 (ICD 503), Committee on National Security Systems (CNSS) Instructions, FIPS, SAA requirements and processes, Continuous Monitoring Framework experience, Plan of Action & Milestones (POA&M) policies and vulnerability/patch management
• Ability to define project goals and work independently to complete projects while adhering to the established schedule
• Proficient with vulnerability and scanning tools and well-versed in interpreting risk posture resulting from assessment reports
• A solid background in IT systems support
• A demonstrated ability to quickly and independently learn unfamiliar IT systems
• Demonstrated ability to effectively communicate both verbally and in writing
• Work on moderately complex assignments, using judgement to resolve problems/make recommendations
• Proficient with Microsoft products – Word, Excel, PowerPoint and Vision

InfiniSource Consulting Solutions is committed to hiring and retaining a diverse workforce We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. US Citizenship is required for most positions.