Information Systems Security Officer

SGS Consulting; Boston (MA); On-site; USD 90,000 - 130,000; Full time

Job summary

SGS Consulting in Boston, MA is seeking an experienced cybersecurity professional to support Programs with midlevel expertise. You will assist with compliance activities, RMF, SSP artifacts, and risk remediation to strengthen the organization's security posture.

You will coordinate with Program Managers and the ISSM, monitor findings, and help align IT security priorities with the strategic goals while ensuring policies and procedures are followed across systems.

Qualifications

• BS degree preferred but not required.
• Security Plus (8570) is the minimum certification.

Responsibilities

• Assist and support compliance activities including system security configuration guidelines.
• Continuously validate the organization against policies, guidelines, procedures, regulations.
• Ensure remediation plans for vulnerabilities identified during risk assessments, audits, inspections.
• Promote awareness of security issues among management and align with organizational goals.
• Track audit findings and ensure timely mitigation actions.
• Prepare SSP and POA&M artifacts with ISSM.
• Conduct vulnerability scanning, configuration assessment, and remediation.
• Lead IT security priorities with the security strategy.
• Interpret noncompliance patterns to assess risk and impact.

Skills

RMF

ISSO

Security+

Risk assessment

Education

Bachelor’s degree (preferred)

Security+ (8570)

Job description

Job Responsibilities:

• This role is supporting Programs and Client prefers candidates with midlevel experience:
• Assist and support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
• Continuously validate the organization against policies/guidelines/procedures/regulations/laws to ensure compliance.
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals.
• Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
• Recommend resource allocations required to securely operate and maintain an organization's cybersecurity requirements.
• Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to key stake holders.
• Recognize a possible security violation and take appropriate action to report the incident, as required.
• Assist the Program Managers and the Information System Security Manager (ISSM) in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action &; Milestones (POA&;M), Risk Assessment Report, and Continuous Monitoring Strategy.
• Ensure systems are operated, maintained, and disposed of in accordance with organization security policies and procedures.
• Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
• Lead and align information technology (IT) security priorities with the security strategy.
• Prepare for and participate in periodic organization compliance assessments.
• Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.

Skills:

• ITAssist the Program Managers and the Information System Security Manager (ISSM) in the developmentISSO, RMF

Education/Experience:

• BS degree is preferred but not requiredSecurity Plus is the minimum 8570 certification requirement.