Information Systems Security Officer

CAE; Arlington (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

CAE USA Inc. is seeking an Information Systems Security Officer (ISSO) to support DoD programs and ensure classified information systems meet security requirements.

The role involves integrating cyber security objectives with program leadership, leading a team of cyber professionals, and interfacing with government officials to maintain compliance and governance across lifecycle phases. The ideal candidate will have DoD 8570.01-M IAM II credentials, strong knowledge of RMF and JSIG, and the

Qualifications

• Graduate Degree and a minimum of 5 years of related experience, OR
• Bachelor's Degree in discipline (STEM) and minimum 7 years of related experience
• Active DoD 8570.01-M IAM level II credentials (e.g. CISSP, CISM, GSLC)
• Subject matter expert on security standards and frameworks (FIPS, NIST SP 800 Series, JSIG, DAAPM, ICD)
• Experience managing cybersecurity requirements or teams in SAP/SCI environments
• Experience interfacing with customers (DCSA, AO/DAO, GCAs, IT, PMs, Cyber Architects)
• Experience leading A&A of classified information systems
• Excellent communication and leadership skills
• Ability to manage multiple projects in dynamic environments
• U.S. citizenship required for this role

Responsibilities

• Integrate the Classified Cyber Security Program with the PM leadership to achieve cyber goals
• Assist program personnel at offsite locations to meet USG certification requirements
• Provide leadership and mentorship to Cyber Security Professional team members
• Liaise with government Authorizing Officials for business within area of responsibility
• Interpret JSIG to determine IA requirements and conduct RMF risk assessments
• Develop system documentation for authorization, security management and continuous monitoring
• Ensure security controls operate during all lifecycle phases
• Coordinate continuous monitoring per DoD requirements and monitor IOC with SIEM tools
• Coordinate with cyber systems security engineers and developers to oversee secure solutions
• Participate in implementing current and future security domains and architectures

Skills

Leadership

Cybersecurity

Project management

Communication

Team mentorship

Education

Graduate degree in STEM

Bachelor's degree in STEM

Tools

SIEM

Splunk

Nessus

SCC SCAP

Job description

As an Information Systems Security Officer (ISSO) you will join the CAE USA, Inc. Classified Cyber Security Team supporting Department of Defense (DoD) programs to ensure classified information systems meet cyber security requirements and government directives.

Essential Duties and Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Integrate the Classified Cyber Security Program function with the Program Management leadership team in order to execute the strategic cyber security goals of the assigned portfolio
• Assist program personnel at offsite locations to ensure they meet USG certification requirements and are properly trained to execute the cybersecurity program effectively and maintain security compliance
• Provide direct leadership and mentorship to Cyber Security Professional team members executing on tactical milestones, ensuring success for both portfolio programs and the Cyber Security organization
• Serves as the primary liaison with various government Authorizing Officials (AO) for business within their area of responsibility.
• The successful candidate will have a background in cyber security, project management, leadership, collaborative teaming and process improvement initiatives.
• Interpret the Joint Special Access Program Implementation Guide (JSIG) in determining technical Information Assurance (IA) requirements, conduct cyber risk assessment activities including vulnerability analysis, analysis of mitigation solutions and ensure proper security implementation of the Risk Management Framework (RMF).
• Develop system documentation for information system authorization, security management, and continuous monitoring of both networked and standalone information systems.
• Ensure that selected security controls are implemented and operating as intended during all phases of the information system lifecycle.
• Coordinate and drive continuous monitoring activities in accordance with DoD requirements by monitoring security infrastructure and security alarm devices for Indicators of Compromise (IOC) utilizing SIEM and cybersecurity toolsets.
• Perform hardware/software configuration management
• Conduct technical investigative activities, data integrity containments and assist with reports of investigation for IA related security events.
• Coordinate with cyber systems security engineers, system architects, and developers to provide oversight in the development of secure technical solutions.
• Participate in implementation of current and future security domains and architectures including those which may introduce new service areas.

Qualifications and Education Requirements

• Graduate Degree and a minimum of 5 years of prior related experience, OR
• Bachelor's Degree in discipline (STEM) and minimum 7 years of prior relevant experience
• Currently possess an active DoD 8570.01-M IAM level II certified credentials (e.g. CISSP, CISM, GSLC)
• Subject matter expert regarding security standards and frameworks, rules and regulations, and system trust principals, such as, FIPS, NIST SP 800 Series, JSIG, DAAPM, and/or ICD.
• Experience managing cybersecurity requirements and /or team(s) operating in collateral, Special Access Programs (SAP) and /or Specialized Compartmentalized Information (SCI) environments for an enterprise/major business portfolio of programs.
• Experience successfully interfacing with internal/external customers (DCSA, AO/DAO, GCAs, IT, Program Managers, Program Engineering, Cyber Architects/Engineers, etc.)
• Experience leading the authorization and approval (A&A) of classified information systems
• Experience managing people and technical resources
• Excellent communications skills, oral and written
• Demonstrated strong critical thinking and problem-solving skills
• Self-motivated and possesses good written, verbal, listening and presentation skills, particularly in documenting evaluation results
• Confident personality with the ability to effectively prioritize multiple projects
• Ability to work with people in a team environment and deal effectively with changing project priorities
• Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role.

Preferred Skills

• Working knowledge of Windows and Linux environments
• Experience with SIEM and Compliance scanning tools (e.g. Splunk, Nessus, ACAS, SCC SCAP, Solar Winds, STIG Viewer, Vulnerator, etc.)
• Self-driven and results-oriented capable of effectively working multiple tasks concurrently and across an ambiguous and uncertain landscape
• Ability to motivate, inspire, grow Cybersecurity Team members
• Self-driven and results-oriented capable of effectively working multiple tasks concurrently and across an ambiguous and uncertain landscape

Security Responsibilities

Must comply with all company security and data protection / usage policies and procedures. Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need-to-know. Shall not divulge information outside company without management approval. All government and proprietary information will be accessed and stored electronically on company provided resources.

• Incumbent must be eligible for DoD Personal Security Clearance.

Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role.

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. Some travel may be required.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Ability to operate a personal computer and sit at workstation for extended periods of time
• Ability to lift 50 pounds

OTHER DUTIES

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice.

CAE USA Inc. is an equal opportunity employer, and all qualified applicants will be considered for employment without regard to any protected characteristic, including disability and protected veteran status, as defined under federal, state, or local laws.

Applicants needing reasonable accommodations should contact their recruiter at any point in the recruitment process. If you need assistance to submit your application because of incompatible assistive technology or a disability, please contact us at [e-mail]

Who We Are:

• CAE Vision: Our vision is to be the worldwide partner of choice in defense and security, and civil aviation by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.
• CAE Defense & Security Mission: CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness.
• CAE Values: Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.

What We Have to Offer:

• Comprehensive and competitive benefits package and flexibility that promotes work-life balance
• A work environment where all employees are valued, respected and safe
• Freedom to succeed by enabling team members to deliver, take initiatives and make decisions
• Recognition, professional development, advancement and having fun!