Information System Security Officer, Senior (Top Secret)

Resource Management Concepts, Inc.; Patuxent Highland (MD); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Relocation assistance

11 paid federal holidays

Healthcare plans

401K package

Job summary

Resource Management Concepts, Inc. (RMC) invites applications for an Information Security Analyst serving as the Information Security Systems Officer (ISSO) for a NAVAIR program in Patuxent River, MD. The role emphasizes RMF, risk assessment, and cybersecurity leadership.

The selected candidate will lead RMF packages, conduct risk assessments, supervise junior staff, and collaborate with SMEs to ensure secure operations on classified networks and programs.

Qualifications

• Bachelor's degree or equivalent with extensive relevant experience.
• Active DoD Top Secret clearance required.
• Must meet DoD 8570-1M certifications.
• Must hold one of: CISM, CISSP (or Associate), GSLC.

Responsibilities

• Lead ISSO for a designated NAVAIR program.
• Conduct RMF risk assessments and recommend mitigations.
• Manage day-to-day cybersecurity activities and mentor staff.
• Develop and validate RMF documentation and packages.
• Collaborate with SMEs to support secure operations on classified networks.

Skills

RMF processes

Cybersecurity concepts

IT systems knowledge

Project management

Written/verbal communications

Teamwork

Classified systems

NAVAIR environments

Education

Bachelor's degree

Associate degree + 4 years substitution

Tools

RMF tools e.g., eMASS

eMASSter

STIG Viewer

SCAP Compliance Checker (SCC)

VRAM

Visio

Job description

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is hiring an Information Security Analyst for the role of Information Security Systems Officer (ISSO) to support our NAVAIR customer in Patuxent River, MD. The selected applicant will perform a variety of Information Assurance and Risk Management Framework (RMF) activities, including but not limited to:

• Serving as a Lead ISSO for a designated NAVAIR program.
• Conduct Risk Assessments for US Navy RMF packages and provide recommendations to improve the Cyber Security posture through risk mitigation steps
• Managing day-to-day cybersecurity activities for the team, including the oversight of less senior staff and their assigned responsibilities.
• Performing duties of the Risk Management Framework (RMF) ISSO role, including:
  • Developing US Navy RMF authorization packages.
  • Performing validation activities for RMC authorization packages.
  • Preparing/Updating RMF documentation.
  • Preparing IATTs and Use Case MFRs as required to support development and testing.
  • Preparing for CyberSafe authorization in parallel with the system authorizations.
  • Establishing Cybersecurity policies IAW security control implementations.
  • Implementing a Cybersecurity Plan.
  • Performing Cyber Tabletop exercises.
  • Performing asset and vulnerability management via VRAM reporting.
  • Performing vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs).
  • Performing system security assessments.
  • Evaluating and reporting software IAW DITPR/DADMS requirements.

Requirements

• A bachelor's degree and more than ten (10) years of relevant experience are required. An associate degree plus four (4) years of additional experience performing work related to the labor category functional description may be substituted for a Bachelor?s Degree.
• An active DoD TOP SECRET clearance is required to start. The applicant may be subjected to a security investigation and must meet eligibility requirements for access to classified information.
• The applicant must meet the certification and clearance requirements established IAW the DoD Manual 8570-1M.
• The applicant must have one of the following certifications to start:
  • CISM
  • CISSP (or Associate)
  • GSLC
• The applicant must be knowledgeable and proficient in the following:
  • Risk Management Framework (RMF) processes.
  • Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).
  • IT systems and subsystems.
  • Rotary Aircraft systems
  • Secure Operating Systems
  • Project management.
  • Written and verbal communications.
  • Teamwork and collaboration.
  • Working on classified systems (i.e., SIPRNet) within secure environments.
  • Working on high-visibility or mission-critical aspects of a given program and performing all functional duties independently and as part of a team in NAVAIR environments.

Benefits

• We offer Monday to Friday full-time day shift work and can assist in paid relocation.
• This also includes a competitive paid vacation package with 11 paid federal holidays.
• Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.
• Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The salary range for this position is $150,000 - $190,000.

#LI-LL1