L

LV8D Solutions

Information Systems Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeChantilly, VA, USANo salary listed

About the Job

Requirements

  • Familiarity with conducting research and analysis.
  • Thorough understanding and application of network security principles, practices, and implementations.
  • Familiarity with controlling, labeling, virus scanning, and appropriately transferring data between information systems at varying classification levels.
  • Thorough working knowledge of applicable Intelligence Community and Department of Defense policies, procedures, and operating instructions related to Information Technology, Information Assurance, and Information Management.
  • Working knowledge of cross-functional integration of information systems into a physical security environment.
  • Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
  • Understanding of system methodologies, including client-server systems, web hosting, web content servers, policy servers, directory servers, firewalls, wide area networks, local area networks, switches, and routers.
  • Expertise in detecting and preventing computer security compromises in a networked environment.
  • Expertise with configuration management, system maintenance, and integration testing.
  • Expertise in using tools to prevent or negate malicious code.
  • Understanding of Commercial Off-The-Shelf tools that scan the physical layer of removable and fixed media, including CDs, hard drives, thumb drives, and Zip/Jazz media.
  • Expertise in forensics chain of custody and evidentiary preservation.
  • Ability to troubleshoot technical configurations and make recommendations on protecting classified and sensitive data.
  • Demonstrated ability to translate technical information and information technology terminology into plain English.
  • Ability to apply a risk management philosophy to security challenges and articulate the pros and cons clearly and concisely.
  • Demonstrated proficiency with computer operating systems such as Microsoft Windows, Linux, Unix, and Mac OS.
  • Analytical ability to decipher complex technical configuration management documents.
  • Proficiency in maintaining databases.
  • Strong ability to elicit, articulate, and document information in an organized manner.
  • Demonstrated experience with Microsoft Office Suite.
  • Demonstrated ability to correlate audit results across systems or users and notify the Information Systems Security Manager of discrepancies.
  • Demonstrated proficiency in guiding complex information systems through assessment and authorization control gates.
  • Associate’s degree and 8 or more years of relevant experience, or Bachelor’s degree and 6 or more years of relevant experience, or Master’s degree and 4 or more years of relevant experience.
  • An active CASP+, CISA, CISSP, GCED, or GCIH certification, or willingness to obtain or maintain one within six months of hire.
  • U.S. citizenship is required.
  • Active Top Secret/Sensitive Compartmented Information clearance and an active Counterintelligence or Full Scope polygraph are required.

Responsibilities

  • Maintain an efficient operational security posture for programs and information systems.
  • Serve as the information security interface to government customers and Accrediting Authorities.
  • Perform vulnerability and risk assessments to support authorization and accreditation.
  • Prepare and review Risk Management Framework documentation, including System Security Plans, Authorization to Operate packages, Risk Assessment Reports, Security Control Traceability Matrices, Plans of Action and Milestones, System Assessment Plans, and Continuous Monitoring Plans.
  • Support and track customer security authorization activities.
  • Conduct periodic reviews and evaluations of required information-system policies, standards, and procedures.
  • Coordinate information-system security assessments, tests, and reviews.
  • Conduct due diligence and process hardware and software requests.
  • Provide configuration management for information-system security software, hardware, and firmware.
  • Ensure proper measures are taken when an information-system incident or vulnerability is discovered.

Desired Qualifications

  • Ability to decipher and explain Intelligence Community Directive 503 in clear language.
  • Demonstrated ability to work independently of close supervision.
  • Ability to effectively provide ISSO guidance to Level 1 and Level 2 ISSOs.

About the Company

LV8D Solutions

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at LV8D Solutions

See more jobs