Senior Information Systems Security Officer (ISSO)/Project Manager

Cape Fox Shared Services; Great Falls Crossing (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a Senior Information Systems Security Officer to lead security operations in both on-premises and cloud environments. This role involves overseeing security measures, ensuring compliance with DoD/NIST RMF+ requirements, and managing a team of contractors. The ideal candidate will possess extensive knowledge in information security management and project oversight, ensuring that all security protocols are effectively implemented and maintained. Join a dynamic team dedicated to protecting vital information systems while contributing to critical government projects.

Qualifications

• Expertise in managing security aspects of information systems.
• Experience with DoD/NIST RMF+ requirements.

Responsibilities

• Coordinate meetings with contractor teams and stakeholders.
• Ensure compliance with security policies and procedures.

Skills

Information Systems Security Management

Project Management

DoD/NIST RMF+ Compliance

Incident Handling

Security Training and Awareness

Education

Bachelor's Degree in Computer Science or related field

IA Certifications (e.g., CISSP, CISM)

Job description

Senior Information Systems Security Officer (ISSO) / Project Manager

Work Location: Reston, VA; work may also be performed at locations in the Washington, DC National Capital Region (NCR) (i.e., The District of Columbia; Arlington, Fairfax, Loudon, Prince William, and Stafford counties in VA (including incorporated cities) and Prince George and Montgomery Counties in Maryland) and at additional CONUS Government locations to meet support of combatant commanders, as needed.

Kwaan Tech is seeking a highly qualified professional to join our team in support of a government customer. We are looking for a Senior Information Systems Security Officer (ISSO) to act as the onsite Project Manager for both on-premises and cloud-native environments. The Senior ISSO/Project Manager will serve as an on-site Project Manager/Team Leader with managerial and supervisory authorities to ensure the effective performance of the contract, including monitoring the work assignments of contractor personnel.

The Senior ISSO shall have detailed knowledge and expertise in managing the security aspects of an information system and will be responsible for the day-to-day security operations of a system.

Core Duties:

1. Coordinate or participate in meetings with the contractor team, SCS, CIO, and GSA stakeholders as requested.
2. Participate in management and budget reviews as directed by the Contracting Officer's Representative (COR).
3. Ensure contract deliverables are completed and provided to the appropriate contact.
4. Conduct research, develop, implement, test, and review application information security in accordance with DoD/NIST RMF+ requirements to protect information and prevent unauthorized access.
5. Coordinate with the contractor team regarding security measures, explain potential threats, implement security measures, and monitor applications to meet or exceed all DoD/NIST RMF+ requirements, facilitating faster and more accurate software releases.
6. Be responsible for physical and environmental protection, personnel security, incident handling, and security training and awareness.
7. Work closely with the ISSM and ISO to monitor the system and its environment, develop and update the System Security Plan (SSP), manage changes, and assess security impacts.
8. Maintain the appropriate operational security posture for the system, collaborating with the ISSM and ISO.
9. Ensure systems are operated, maintained, and disposed of according to security policies and procedures outlined in the security authorization package.
10. Attend technical and security training related to assigned duties.
11. Maintain required IA certifications.
12. Ensure all users have the necessary security clearances, authorization, need-to-know, and awareness of their security responsibilities before granting access.
13. Report all security-related incidents through appropriate channels.
14. Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
15. Coordinate any hardware, software, or firmware changes with the ISSM and AO/DAO prior to implementation.
16. Notify the ISSM and AO/DAO of changes that might affect system authorization.
17. Monitor system recovery processes to ensure security features are properly restored and functioning.
18. Ensure all security-related documentation is current and accessible to authorized individuals.
19. Ensure audit records are collected, reviewed, and documented, including any anomalies.