Information Systems Security Officer ; FORECASTED

Description

The Information System Security Officer (ISSO) provides comprehensive support to programs, organizations, systems, and enclaves in maintaining an effective information assurance and cybersecurity posture. This role ensures the implementation, coordination, and enforcement of information systems security policies, standards, and methodologies. The ISSO maintains the operational security posture of assigned systems, supports security authorization activities under NIST RMF, and assists in the daily security operations required to protect systems processing classified information.

• Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies.
• Propose, coordinate, and implement IT security programs, policies, and methodologies.
• Assist with preparation, development, and maintenance of cybersecurity documentation, including SSPs, SRTMs, C&A packages, and Risk Assessment Reports.
• Maintain operational cybersecurity posture for assigned systems, programs, or enclaves.
• Evaluate security solutions to ensure compliance with security requirements for processing classified information.
• Assist with configuration management (CM) of security-relevant software, hardware, and firmware.
• Manage and control system changes while assessing associated security impacts.
• Maintain records for workstations, servers, network devices, system upgrades, and security‑relevant configuration changes.
• Develop and update system security plans and related cybersecurity documentation.
• Support the ISSM in maintaining the appropriate cybersecurity posture.
• Assist in managing system security aspects and performing daily security operations.
• Track and validate user identification and authentication mechanisms.
• Obtain and maintain system authorization for information systems under assigned purview.
• Provide oversight and direction to contractor ISSOs.
• Interact directly with customers, IT staff, and senior corporate leadership to achieve cybersecurity objectives.
• Conduct vulnerability and risk assessment analyses to support security authorization.
• Provide configuration management for information systems security software, hardware, and firmware.
• Support the implementation of security authorization activities in accordance with NIST Risk Management Framework (RMF).

• Experience:
  
  Fifteen (15) years as an ISSO on programs and contracts of similar scope, type, and complexity.
• Specialized
  
  Experience:
  
  At least three (3) of the following areas:
  • Current security tools
  • Hardware/software security implementation
  • Communication protocols
  • Encryption techniques and tools
• Education:
  
  Bachelor's degree in Computer Science or related discipline from an accredited institution.
  • Substitution:
    Four (4) additional years of ISSO experience may replace the bachelor's degree.
• Certification:
  DoD 8570 IAM Level I compliance or higher required.

• U.S. Citizenship is required for all applicants.
• Certification Requirements:
  DoD 8570 IAM Level I compliance or higher required.
• Employment is contingent upon successful completion of a security background investigation and polygraph.
• All applicants and employees are subject to random drug testing in accordance with Executive Order 12564.
• This position requires an active Security Clearance with appropriate Polygraph.

Salary: $ - $ per year

CTP was voted one of the top 25 best places to work in Baltimore by Baltimore Magazine! Columbia Technology Partners is an Equal Opportunity Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.

Our EEO policy reflects our commitment to ensure equality and promote diversity and inclusion in the workplace. Our policy applies to all employees, job candidates, contractors, stakeholders, partners, and visitors.