D

DLS Engineering

Information Assurance 2 Information System Security Officer - Information System Security Officer

Security Governance, Risk & ComplianceUpdated on Nov 14
Full-timeMontgomery, AL, USA

About the Job

Requirements

  • At least 3 years of experience using security-relevant tools, systems, and applications in support of the Risk Management Framework, including NESSUS, ACAS, DISA Security Technical Implementation Guides, audit tools, ESS, eMASS, and PPS.
  • Experience as an information system security officer or information system security manager supporting classified programs.
  • Experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.
  • Prior system administrator or network operator experience with devices supported by the contract.
  • An IAM-I certification: CASP+, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, Security+ (CE), or SSCP.
  • Must be certified in governance, risk, and compliance (CGRC).
  • Must be a U.S. citizen.
  • Must hold a current Top Secret clearance with SCI access (TS/SCI) or an active Secret clearance.
  • Must pass a government background check before employment.

Responsibilities

  • Implement and enforce cybersecurity policies, procedures, and countermeasures.
  • Ensure users have the required security clearances and need-to-know, complete annual cybersecurity training, and understand their responsibilities before system access is granted; maintain authorized user access-control documentation.
  • Ensure software, hardware, and firmware comply with applicable security configuration guidelines, such as security technical implementation guides and security requirement guides.
  • Ensure configuration-management procedures are followed before implementation and required approvals are obtained.
  • Coordinate changes or modifications with the government; initiate protective or corrective measures with the government when a security incident or vulnerability is discovered.
  • Report security incidents or vulnerabilities to designated representatives and initiate exceptions, deviations, or waivers to cybersecurity requirements as required.
  • Participate in remanence security risk-management processes.
  • Process data-loss-prevention exemptions and removable-media whitelist requests.
  • Document reviews of logs and audit trails at least weekly, or more frequently if required.
  • Conduct removable-media audits at least annually and ensure logs clearly show two-person control activity for all actions.

About the Company

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at DLS Engineering

See more jobs