Information Systems Security Officer - ISSO

SAIC; Chantilly (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

SAIC seeks an experienced Information Systems Security Officer to support a dynamic, long-term program focused on national security. The ISSO will assure confidentiality, integrity, and availability of IT infrastructure while aligning with RMF, NIST, and DoD requirements.

Responsibilities include policy implementation, risk assessments, monitoring, incident response, and documentation such as SSPs and SARs. The ideal candidate has 7+ years in information security and relevant certifications.

Qualifications

• Bachelor's degree or equivalent experience in information security.
• 7+ years in information security with 2+ years as an ISSO or similar role.
• Strong knowledge of NIST, ISO 27001, CIS Controls.
• Hands-on with firewalls, IDS/IPS, SIEM and endpoint protection.
• Security certifications such as CISSP, CISM or CISA preferred.
• Knowledge of NIST/DoD policies; strong analytical skills.
• Excellent communication for technical and non-technical stakeholders.

Responsibilities

• Develop, implement, and maintain security policies, procedures, and controls.
• Conduct risk and vulnerability assessments to mitigate security risks.
• Manage RMF activities per NIST and customer policies.
• Monitor security alerts and incidents; respond to threats.
• Enforce controls and deploy security technologies (firewalls, IDS/IPS).
• Lead incident response and coordinate with stakeholders.
• Prepare SSPs, risk assessments, and SARs for audits.
• Conduct security audits and promote security training across staff.

Skills

ISSO experience

RMF

NIST

CIS Controls

SIEM

Firewall

IDS/IPS

Endpoint protection

CISSP

CISM

CISA

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

SAIC has an immediate opening for an Information Systems Security Officer (ISSO) to support a highly dynamic and growing program. You will be a part of a large multi-year contract that supports our customer in systems engineering and integration across a broad portfolio of projects. You will come into a program that enjoys a close working relationship with the customer, bringing exquisite technical expertise to bear on real world problems, helping the customer execute real world missions that impact National Security on a daily basis. This close relationship, along with the program's longevity (20 years), ensures that as a new team member you will find a depth of support to grow and develop that is unmatched, all while making a difference - daily.

We need a highly motivated and experienced ISSO to support our cybersecurity initiatives and ensure the confidentiality, integrity, and availability of our information systems. The successful candidate will play a critical role in maintaining the security posture of our organization's IT infrastructure and ensuring compliance with applicable regulations and standards. The ISSO will work closely with the government client in establishing, certifying, and maintaining classified networks in support of the customer's intelligence enterprise.

Key Responsibilities:

• Develop, implement, and maintain security policies, procedures, and controls in accordance with organizational objectives and regulatory requirements
• Conduct risk assessments and vulnerability assessments to identify and mitigate security risks
• Manage Risk Management Framework (RMF) activities in accordance with NIST and customer policies and procedures
• Monitor and analyze security alerts and incidents to identify potential threats and respond appropriately
• Enforce security controls and manage the deployment of security technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection software
• Lead incident response efforts and coordinate with relevant stakeholders to resolve security incidents
• Prepare and maintain security documentation, including system security plans (SSPs), risk assessments, and security assessment reports (SARs)
• Conduct regular security audits and assessments to ensure compliance with industry standards and best practices
• Provide security training and awareness programs for staff to promote a culture of security within the organization
• Collaborate with IT and business units to implement security measures and ensure secure systems development and deployment

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field; experience can be substituted for the Bachelor's degree
• Minimum of 7 years of experience in information security, with at least 2 years as an Information Systems Security Officer or a similar role
• Strong knowledge of security frameworks and standards such as NIST, ISO 27001, and CIS Controls
• Hands-on experience with security technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection
• Professional security certifications such as CISSP, CISM, CISA, or equivalent are highly preferred
• Knowledge of NIST and DoD policies and procedures
• Excellent analytical, problem-solving, and decision-making skills
• Strong communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders
• Ability to work independently and manage multiple tasks and projects simultaneously

Desired:

• Professional security certifications such as CISSP, CISM, CISA, or equivalent are highly preferred
• Qualified at the IAM Level II for the DoD Information Assurance Workforce
• CompTIA Security+ or higher