Mid-Level Information System Security Officer #TS999

***Security Clearance Required: A final DoD Top Secret clearance***

This position does not provide a telework option. Candidate must be willing to work on-site in Patuxent River, MD.

CRL provides a signing bonus and potential relocation assistance for this position. 

Primary Responsibilities: 

The candidate will be the ISSO for information systems under their cognizance. The ISSO will collaborate with the program team to ensure the security of information systems and compliance with the Joint Special Access Program Implementation Guide, Rev 4 (JSIG), Risk Management Framework (RMF), and other applicable documents. The ISSO will be an active member of an information assurance (IA) team with broad responsibility for the security of SAP information systems.

ISSOs will plan, implement, upgrade, and monitor security measures for the protection of information systems. ISSOs will ensure the appropriate security controls are in place to safeguard digital files and vital electronic infrastructure. ISSOs will ensure proper response to computer security breaches, incidents, and viruses.

ISSOs will analyze system vulnerabilities and assess risks to the information system. ISSOs will collaborate with the ISSM, information technology (IT) team, and management triage vulnerabilities and determine priority for remediation. ISSOs will develop, maintain, and present information system risk metrics showing information system risk over time.

ISSOs will develop, update, and maintain IT / IA policy and strategy for the program office including conducting business impact analyses and other analyses required to develop policies. ISSOs will develop and provide accreditation packages in accordance with JSIG and RMF based federal regulations and policies and documentation supporting Authority to Operate (ATO) requirements for developmental hardware, software, and facilities.

ISSOs will audit Baseline + Accessibility and Cross Domain Solution environments using system logs and auditing tools to validate security posture and monitor for insider threat.

ISSOs will manage and maintain Plan of Actions and Milestones (POA&M) documentation for program office and supporting sites to ensure required actions are completed on time. ISSOs will manage cybersecurity project scope, schedule, and risks and will keep the ISSM, IT team, and management informed of progress, issues, and vulnerabilities with sufficient time to ensure system ATO is maintained.

ISSOs will collaborate with Contractors supporting program office efforts to ensure accreditation packages are submitted. ISSOs will also maintain communications with the Security Control Assessor (SCA)/Delegated Authorizing Official (DAO), understand issues, and report issues to the ISSM and management as required.

ISSOs will conduct and lead successful Assessment and Authorization (A&A) events in support of program office efforts.

ISSOs may act as a Data Transfer Agent utilizing an approved Assured File Transfer procedure. 

Required Education: High School Diploma or GED.

Required Experience:

Desired Experience:

Allowable Experience/Education Substitutions: Experience cannot be substituted for education.

Security Clearance Required: A final DoD Top Secret clearance.

Estimated Travel: 10%

Location: On-site Patuxent River, MD. Telework is not offered.

Pay Range: $80,000-$135,000. Salary will be set based on experience, education, and contractual requirements. This range represents the standard pay for this role and is just one component of CRL's compensation package.
 

CRL Technologies is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sexual orientation, color, religion, national origin, age, disability, veteran status, genetic data, or religion or other legally protected status.

PD36