Mid-Level Information System Security Officer #TS999

Crl Technologies Inc; Lexington Park (MD); On-site; USD 80,000 - 135,000; Full time

Benefits offered by this job

Signing bonus

Relocation assistance

Job summary

CRL Technologies is seeking a Mid-Level Information System Security Officer (ISSO) in Lexington Park, MD to manage security for SAP information systems and ensure compliance with JSIG, RMF, and related DoD standards. The role is on-site at Patuxent River; telework is not offered.

A TS clearance is required and relocation signing bonus may be provided. The ISSO will lead risk assessments, develop accreditation packages, monitor security controls, and coordinate with the IA team, ISSM, and

Qualifications

• Three or more years of combined experience in information security duties as described.
• Must meet IAM I certification requirements per DoD 8570.01M, DoD 8140, and DoD 5239.2.
• Experience administering SAP information systems and familiarity with RMF/JSIG is a plus.

Responsibilities

• Serve as the ISSO for information systems under cognizance and ensure compliance with JSIG, RMF, and related documents.
• Plan, implement, upgrade, and monitor security measures to safeguard information systems and infrastructure.
• Develop and present IT/IA policy with accreditation packages and ATO documentation.
• Coordinate with ISSM, IT team, and management to triage vulnerabilities and remediation priorities.

Skills

Three years experience

IAM I certification

Education

High School Diploma or GED

Tools

Splunk

Windows

Linux

VMware

OpenShift

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Mid-Level Information System Security Officer #TS999

Lexington Park, MD Full-time Regular Lexington Park, MD, US

2 days ago Requisition ID: 1415

Salary Range: $80,000.00 To $135,000.00 Annually

***Security Clearance Required: A final DoD Top Secret clearance***

This position does not provide a telework option. Candidate must be willing to work on-site in Patuxent River, MD.

CRL provides a signing bonus and potential relocation assistance for this position.

Primary Responsibilities:

The candidate will be the ISSO for information systems under their cognizance. The ISSO will collaborate with the program team to ensure the security of information systems and compliance with the Joint Special Access Program Implementation Guide, Rev 4 (JSIG), Risk Management Framework (RMF), and other applicable documents. The ISSO will be an active member of an information assurance (IA) team with broad responsibility for the security of SAP information systems.

ISSOs will plan, implement, upgrade, and monitor security measures for the protection of information systems. ISSOs will ensure the appropriate security controls are in place to safeguard digital files and vital electronic infrastructure. ISSOs will ensure proper response to computer security breaches, incidents, and viruses.

ISSOs will analyze system vulnerabilities and assess risks to the information system. ISSOs will collaborate with the ISSM, information technology (IT) team, and management triage vulnerabilities and determine priority for remediation. ISSOs will develop, maintain, and present information system risk metrics showing information system risk over time.

ISSOs will develop, update, and maintain IT / IA policy and strategy for the program office including conducting business impact analyses and other analyses required to develop policies. ISSOs will develop and provide accreditation packages in accordance with JSIG and RMF based federal regulations and policies and documentation supporting Authority to Operate (ATO) requirements for developmental hardware, software, and facilities.

ISSOs will audit Baseline + Accessibility and Cross Domain Solution environments using system logs and auditing tools to validate security posture and monitor for insider threat.

ISSOs will manage and maintain Plan of Actions and Milestones (POA&M) documentation for program office and supporting sites to ensure required actions are completed on time. ISSOs will manage cybersecurity project scope, schedule, and risks and will keep the ISSM, IT team, and management informed of progress, issues, and vulnerabilities with sufficient time to ensure system ATO is maintained.

ISSOs will collaborate with Contractors supporting program office efforts to ensure accreditation packages are submitted. ISSOs will also maintain communications with the Security Control Assessor (SCA)/Delegated Authorizing Official (DAO), understand issues, and report issues to the ISSM and management as required.

ISSOs will conduct and lead successful Assessment and Authorization (A&A) events in support of program office efforts.

ISSOs may act as a Data Transfer Agent utilizing an approved Assured File Transfer procedure.

Required Education: High School Diploma or GED.

Required Experience:

• Candidates must have at least three (3) years of combined experience performing duties described in this position description.
• Candidates must meet the IAM I certification requirements (provide certifications) in accordance with DoD 8570.01M, DoD 8140, and DOD 5239.2.

Desired Experience:

• Candidates should have experience administering SAP information systems.
• Experience utilizing and configuring Splunk for reviewing system audit logs.
• Windows, Linux, VMWare, and OpenShift experience.
• Experience with Platform IT (PIT) or PIT accreditations.

Allowable Experience/Education Substitutions : Experience cannot be substituted for education.

Security Clearance Required: A final DoD Top Secret clearance.

Location: On-site Patuxent River, MD. Telework is not offered.

Pay Range: $80,000-$135,000. Salary will be set based on experience, education, and contractual requirements. This range represents the standard pay for this role and is just one component of CRL's compensation package.

CRL Technologies is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sexual orientation, color, religion, national origin, age, disability, veteran status, genetic data, or religion or other legally protected status.