Information System Security Officer (ISSO) (TS/SCI-POLY Required)

Best Value Technology, Inc. (BVTI); Haymarket (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Best Value Technology, Inc. (BVTI) in Haymarket, Virginia is looking for an experienced Information System Security Officer (ISSO) to support federal clients in the Intelligence Community on long‑term, high‑profile contracts. Candidates must possess an active TS/SCI clearance with polygraph and have at least 5 years of experience in information security.

The ideal candidate will excel in coordinating security measures, conducting audits, and ensuring compliance with security standards. Education requirements include a Bachelor's degree in a STEM field or an advanced degree in Cybersecurity.

Qualifications

• Bachelor's degree in a STEM field or advanced degree in Cybersecurity required.
• 5+ years of experience in information security or risk management.
• Active TS/SCI clearance with polygraph required.

Responsibilities

• Ensure information systems are maintained according to security policies.
• Conduct security audits and implement corrective actions.
• Perform risk assessments and document security problems.

Skills

Information security experience

Risk management

Cybersecurity knowledge

Communication skills

Education

Bachelor's Degree in a STEM field

Advanced degree in Cybersecurity

Tools

CISSP Certification

CISA Certification

CISM Certification

Job description

Best Value Technology, Inc. (BVTI), a service‑disabled veteran‑owned small business, seeks an experienced Information System Security Officer (ISSO) to support federal clients within the Intelligence Community on long‑term, high‑profile contracts.

Clearance Requirements

• Must possess an active TS/SCI clearance with an active Polygraph. Both the clearance and polygraph need to be fully adjudicated. Interim clearances will not be accepted.
• U.S. citizenship is required to comply with the government contract.

Duties and Responsibilities

• Work alongside systems administrators to ensure that all information systems are operated, maintained, and disposed of in accordance with established security policies and practices.
• Coordinate with physical security personnel to ensure the physical protection of information security assets.
• Perform continuous monitoring of systems to ensure the systems stay accredited by performing software patching and updates.
• Conduct security audits of systems and initiate corrective actions if a security problem is discovered.
• Inform and coordinate with IT professionals when protective or corrective measures are needed to resolve security issues or meet security standards.
• Conduct risk assessments, actively document security problems, and provide strategic mitigation strategies.
• Evaluate proposed changes or additions to the information systems and advise the team of security relevance.
• Maintain documentation of the system administrators' PKI and PRIVAC status.
• Ensure the information systems remain in compliance with vulnerabilities and any other security‑related notices.
• Review security engineering design and seek approval, support implementation, and testing for all aspects of IA and IS (InfoSec) engineering at all stages of the Systems Development Life Cycle (SDLC) process.
• Assess systems security threats/risks throughout the program life cycle and work with IT professionals to implement corrective action.
• Review and monitor security designs in hardware, software, data, and procedures.
• Perform systems certification and accreditation planning and testing, and liaison activities.
• Prepare and maintain C&A documentation such as SSP, Security CONOPS, ST&E reports, etc.
• Review various documents and files for transfer across systems or before release.
• Communicate with customers' security authorities to ensure compliance and negotiate proposed system or policy changes.
• Report the security status of information security to customers' ISSM.
• Ensure users and systems support personnel have the required security clearance and need‑to‑know to utilize the system.
• Conduct user training and awareness activities.

Required Education, Knowledge, and Skills

• Bachelor's Degree in a STEM field or an advanced degree in Cybersecurity.
• Minimum of five (5) years of experience in information security or risk management.
• Automated Information System (AIS) security experience with multiple IC SCI Control Systems, DoD Special Access Program (SAP)/Special Access Required (SAR) activities, and SCI Special Handling.
• An active technical certification compliant with DoD 8140.
  • The following certifications are preferred:
    • Certified Information Systems Security Professional (CISSP) Certification
    • Certified Information Systems Auditor (CISA) Certification
    • Certified Information Systems Manager (CISM) Certification

Best Value Technology, Inc. (BVTI) is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on any legally protected basis.