Senior Information Security Officer - Risk & A&A SME

PlanIT Group, LLC; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

PlanIT Group, LLC in Reston, VA is seeking a seasoned security professional to lead assessments of threats and vulnerabilities across applications and cloud domains, determine deviations from policy, and assess risk. The role focuses on delivering mitigation recommendations in both operational and non-operational contexts.

You will implement security controls, perform risk assessments, and document compliance per NIST RMF and ISO standards, while supporting A&A processes, governance tools, and

Qualifications

• Eight years of relevant experience.
• Degree from accredited college/university in the applicable field; if not, four additional years of related experience.
• Typically performs all functional duties independently.
• Special credentials (licenses and/or certifications) may be required at the Task Order level.

Responsibilities

• Conduct security assessments and determine deviations from policy.
• Assess risk levels and develop mitigation countermeasures.
• Implement security controls and document compliance per NIST RMF and ISO standards.
• Evaluate documentation and accreditation processes to ensure IT systems meet IA and security requirements.
• Support development of security blueprints, models, designs, standards, and guidelines for secure enterprise IT.
• Use network and vulnerability scanning tools to interrogate systems for configuration and status.
• Serve as SME for the US Government A&A process and advise stakeholders as needed.
• Maintain schedules and action plans; communicate with cross-functional teams and executives.

Skills

Security assessments

Cloud computing

Risk assessments

NIST RMF

ISO standards

A&A processes

GRC tools

Network scanning tools

Vulnerability scanning tools

Security architecture

Education

Bachelor's degree in related field

Tools

GRC tools

Network scanners

Vulnerability scanners

Job description

PlanIT Group, LLC in Reston, VA is seeking a seasoned security professional to lead assessments of threats and vulnerabilities across applications and cloud domains, determine deviations from policy, and assess risk. The role focuses on delivering mitigation recommendations in both operational and non-operational contexts.

You will implement security controls, perform risk assessments, and document compliance per NIST RMF and ISO standards, while supporting A&A processes, governance tools, and