Information System Security Officer, Senior (Secret)

Resource Management Concepts, Inc.; Patuxent Highland (MD); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Relocation assistance

Paid vacation + holidays

Healthcare plans

401K plan

Pet insurance

Job summary

Resource Management Concepts, Inc. (RMC) seeks an Information Security Analyst to serve as ISSO for a Navy program at Patuxent River, MD. You will lead RMF activities, prepare ATO packages, and ensure compliance with DoD security controls.

The role requires active DoD SECRET clearance and DoD 8570-1M certifications. Expect collaboration with SMEs, documentation duties, and on-site work in a classified environment.

Qualifications

• A bachelor's degree and more than ten (10) years of relevant experience are required.
• Active DoD SECRET clearance is required to start.
• Must meet certification and clearance requirements in DoD 8570-1M.
• Must have one of the following certifications to start: CISM, CISSP (or Associate), GSLC.
• Knowledgeable in RMF processes.
• Proficient with RMF and cybersecurity tools (eMASS, eMASSter, STIG Viewer, SCC, VRAM, Visio).
• Experience working on classified systems (SIPRNet) within secure environments.

Responsibilities

• Lead ISSO for a designated NAVAIR program.
• Coordinate and develop Authorization to Operate (ATO) packages.
• Ensure systems comply with DoD controls, STIGs, and policies.
• Track and document security changes to hardware/software/firmware.
• Oversee day-to-day cybersecurity activities for the team.
• Create Memorandums for the Record (MFRs) for boundary changes.
• Prepare RMF documentation and IATTs/Use Case MFRs.
• Implement a Cybersecurity Plan and perform weekly audit validation.
• Conduct Cyber Tabletop exercises and manage asset/vulnerability data via VRAM.
• Collaborate with SMEs for system security assessments and compliance.
• Evaluate software for compliance with DITPR/DADMS.
• Onsite 100% in a classified government facility.

Skills

RMF

Cybersecurity tools

IT systems

Project management

Written communications

Teamwork

SIPRNet environment

Education

Bachelor's degree

Tools

eMASS

eMASSter

STIG Viewer

SCAP Compliance Checker (SCC)

VRAM

Visio

Job description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring an Information Security Analyst for the role of Information Security Systems Officer (ISSO) to support our Navy customer in Patuxent River, MD. The selected applicant will perform a variety of Information Assurance and Risk Management Framework (RMF) activities, including but not limited to{{:}}

• Serving as a Lead ISSO for a designated NAVAIR program
• Coordinates and develops Authorization to Operated (ATO) packages for upcoming boundaries that need to be authorized
• Ensure systems comply with DoD security controls, Security Technical Implementation Guides (STIGs), and applicable policies.
• Track and document security-relevant changes to hardware, software, and firmware. Ensures Hardware and software profiles exist for each boundary are compliant
• Managing day-to-day cybersecurity activities for the team, including the oversight of team of ISSOs and their assigned responsibilities
• Creates Memorandums for the Record (MFRs) for any major changes to the boundaries. Submits these MFRs for review by the DAO.
• Performing duties of the Risk Management Framework (RMF) ISSO role, including{{:}}
• Preparing/Updating RMF documentation
• Preparing IATTs and Use Case MFRs as required to support development and testing
• Implementing a Cybersecurity Plan
• Perform weekly validation of auditing to ensure audits have been completed for each boundary
• Performing Cyber Tabletop exercises
• Performing asset and vulnerability management via VRAM reporting
• Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs)
• Performing system security assessments
• Evaluating and reporting software IAW DITPR/DADMS requirements
• Requirement is the candidate to be onsite 100% of the time in a classified government facility
  

Requirements

• A bachelor's degree and more than ten (10) years of relevant experience are required. An associate degree plus four (4) years of additional experience performing work related to the labor category functional description may be substituted for a Bachelor's Degree.
• An active DoD SECRET clearance is required to start.The applicant may be subjected to a security investigation and must meet eligibility requirements for access to classified information.
• The applicant must meet the certification and clearance requirements established IAW the DoD Manual 8570-1M.
• The applicant must have one of the following certifications to start{{:}}
• • CISM
  • CISSP (or Associate)
  • GSLC
• The applicant must be knowledgeable and proficient in the following{{:}}
• • Risk Management Framework (RMF) processes
  • Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio)
  • IT systems and subsystems
  • Project management
  • Written and verbal communications
  • Teamwork and collaboration
  • Working on classified systems (i.e., SIPRNet) within secure environments
    

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees. RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. We offer Monday to Friday full-time day shift work and can assist in paid relocation. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The salary range for this position is $140,000 - $180,000.