ISSO: Information Security Officer - RMF & Compliance Lead

Amentum; Linthicum (MD); On-site; USD 175,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

Stock purchase plan

Job summary

Amentum in Linthicum, MD is seeking an Information Systems Security Officer (ISSO) II to support the program's information assurance needs and maintain secure operations.

The role requires eight years of IT/cybersecurity experience, TS/SCI clearance, a Bachelor's degree, and an IAM Level I certification, with RMF/NIST framework responsibilities.

You will prepare System Security Plans, Risk Assessments, and A&A packages, and provide daily oversight of security activities for the system.

Qualifications

• Bachelor's degree in computer science, cyber security, IT, or a related field.
• Eight years of combined IT/cybersecurity experience; two areas: security tools, PKI, or encryption.
• DoD 8570.01-M IAM Level I certification is required.
• TS/SCI clearance is required.
• Experience with RMF/NIST processes and SSPs, A&A packages, and SRTMs.

Responsibilities

• Support information assurance program and security posture.
• Prepare SSPs, Risk Assessments, C&A packages, and SRTMs.
• Assist ISSMs with day-to-day security operations.
• Coordinate changes and assess security impact of changes.

Skills

Information assurance

NIST RMF

Security policies

Vulnerability assessment

Configuration management

Education

Bachelor's degree in Computer Science, Cyber Security, IT, or related field

Tools

Security tools

PKI

IAM 8570 prerequisites

Job description

Amentum in Linthicum, MD is seeking an Information Systems Security Officer (ISSO) II to support the program's information assurance needs and maintain secure operations.

The role requires eight years of IT/cybersecurity experience, TS/SCI clearance, a Bachelor's degree, and an IAM Level I certification, with RMF/NIST framework responsibilities.

You will prepare System Security Plans, Risk Assessments, and A&A packages, and provide daily oversight of security activities for the system.