Information Systems Security Officer

Overview

Experienced Information Systems Security Officer (ISSO) who will be responsible for maintaining compliance with applicable security regulations. Seasoned professional in the job family; full competence in technical area. Manages program and project implementation and makes significant contributions to department goals and planning efforts. Knows when to escalate problems/questions to a higher level. Works with customers.

The job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change, or new ones may be assigned at any time with or without notice.

Please Note:

U.S. Citizenship is required.

• Perform day-to-day maintenance of systems, including auditing and patch management
• Perform technical security assessments of complex systems
• Identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies
• Apply knowledge of IA policy, procedures, and workforce structure to implement secure networking, computing, and enclave environments
• Write authorization and accreditation (A&A) documentation and ensure the systems are operated and maintained in accordance with these security plans
• Enforce the design and implementation of trusted relationships among external systems and architectures
• Support security planning, assessment, risk analysis, and risk management for client systems and programs
• Interact with technical team members from multiple organizations in a diversified, team environment
• Identify overall security requirements for the proper handling of MTSI and client data
• Perform system or network designs that encompass multiple enclaves to include those with differing data protection/classification requirements
• Recommend system-level solutions to resolve security requirements
• Ensure all users have the requisite security clearances, authorizations, need-to-know, and are aware of their security responsibilities before granting access to client systems
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package
• Perform key functions (above) and other security-related tasks as directed on multiple systems, at multiple sites, or for multiple clients
• Schedule, perform and maintain records of required IS auditing, patching, maintenance, software/hardware changes, and scanning based on evolving threat/vulnerabilities and customer compliance requirements
• Assess changes to an information system by performing periodic self-inspections, tests, and reviews of the IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed; ensure corrective actions are taken for identified findings and vulnerabilities
• Maintain a working knowledge of information system functions, security policies, technical security safeguards, and operational security measures
• Coordinate with Information Systems Security Manager, Facility Security Officer (FSO) and Contractor Program Security Officers (CPSO) to define, implement and maintain information security policies, strategies, and procedures
• Implement policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents
• Receive direction/guidance from the MTSI Program Manager and/or Govt technical lead; translate guidance into actionable tasks performed by the project team
• Manage/execute medium-large tech tasks
• Ensures assigned tech tasks are properly coordinated/ efficiently accomplished w/best available resources
• Serve as technical lead for time critical tech projects, test events/tasks requiring senior level tech expertise
• Ensure all required resources (e.g. personnel, HW, SW, facilities, security) are identified to support assigned tasks
• Coordinate w/Project Manager to verify time phased requirements are identified to meet contractual required deadlines
• Accountable for the quality and timely delivery of all technical contract deliverables
• Ensure that task related products are consistent in format and…