Information Systems Security Officer, Senior
Warrenton, Virginia
Employer: Jacobs
Industry: Information Technology
Salary: Competitive
Job type: Full-Time
As a Senior Information Systems Security Officer, you will serve as the subject matter expert with a focus on cybersecurity risk management and governance, including the integration of cyber disciplines, such as mission assurance and supply chain risk management. You will work closely with the Cybersecurity Manager, Information Systems Security Engineers, and Systems/Network Engineers to ensure approaches, constraints, and perspectives are fully recommended and considered in risk management and policy decisions. Analyze the development of strategy, policy, governance, and implementation guidance recommendations to more closely integrate cybersecurity disciplines to enable a holistic risk management approach.
The Senior Information Systems Security Officer will also perform Risk Management Framework (RMF) Assessment and Authorization (A&A) responsibilities. Develop the documentation, validation, and accreditation processes necessary to assure systems meet security and privacy requirements. Evaluate test results, analyze risk, and develop security assessment documentation to support accreditation decisions. Create a risk mitigation strategy and ensure security configurations are maintained in accordance with DoD mandated policies. Interpret RMF guidance from Authorizing Officials for clients and provide information and input for the preparation of accreditation packages. Assess the applicability of emergent vulnerabilities to individual systems and technologies.
Responsibilities:
#divergent
Preferred:
The Senior Information Systems Security Officer will also perform Risk Management Framework (RMF) Assessment and Authorization (A&A) responsibilities. Develop the documentation, validation, and accreditation processes necessary to assure systems meet security and privacy requirements. Evaluate test results, analyze risk, and develop security assessment documentation to support accreditation decisions. Create a risk mitigation strategy and ensure security configurations are maintained in accordance with DoD mandated policies. Interpret RMF guidance from Authorizing Officials for clients and provide information and input for the preparation of accreditation packages. Assess the applicability of emergent vulnerabilities to individual systems and technologies.
Responsibilities:
- Generate and maintain the complete security Body of Evidence (BoE) while leading the A&A activities according to the Risk Management Framework (RMF) processes (ICD 503, CNSSI-1253, NIST 800-37, NIST 800-53, etc.) for all multiple information systems.
- Lead the development and maintenance of information security policies, standards, and control procedures to enable compliance with RMF.
- Complete Security Authorization packages, to include System Security Plans, Security Assessment Reports, POA&M summaries and a Continuous
- Monitoring Plan/assessment schedule, and present executive briefing to senior management.
- Ensure security risk assessments are conducted as appropriate on any system upgrades, software/hardware changes, etc.
- Ensure security authorization boundaries are properly defined and captured in the system security plans, and that all interconnection agreements are in place and current.
- Ensure system security controls contain accurate implementation statements and assessments results, and that appropriate artifacts are completed to support findings provide hands-on assistance as appropriate.
- Ensure POA&Ms have appropriate milestones, accurate description of the weaknesses and remediation, estimated cost to completion and realistic due dates providing hands-on assistance to components as necessary.
- Maintain day-to-day security posture and continuous monitoring of all Information Systems.
- Review system vulnerability scans, verify implementation of DISA STIG's, and ensure other security relevant information system configuration tasks are completed.
- Perform test/evaluation of required technical security controls including performing certification tests and periodic inspections of information systems.
- Develop and conduct test procedures for verification Assessment and Authorization (A&A), Risk Management Framework (RMF) safeguards to meet customer requirements based NIST publications.
- Assess changes to an IS by performing periodic self-inspections, tests, and reviews of the IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed; ensure corrective actions are taken for identified findings and vulnerabilities.
#divergent
- Active TS/SCI Clearance
- Bachelor's degree in a related field required.
- Minimum of 8 years of directly related experience
- Must meet DoD 8570.01-M IAT-II or IAM-I baseline certification requirements such as Security + or equivalent.
- Experience with Microsoft Office applications such as Excel, Word, and Outlook.
- Experience in development of technical documentation to include artifacts required to support Assessment & Authorization (A&A) under the Risk
- Management Framework.
- Experience with security configurations across multiple operating systems in various environments, to include Windows, Linux, UNIX, utilizing Active
- Directory/Group Policy.
- In-depth knowledge of Microsoft Windows OS (client and server); familiarity with Red Hat Enterprise Linux (RHEL) desired.
- Experience in development of technical documentation to include artifacts required to support Assessment & Authorization (A&A) under the Risk
- Management Framework.
- Experience with eMASS, XACTA, ACAS/NESSUS, Trellix, and Splunk.
- Experience with risk managed downloads, IS sanitization and destruction, contaminations, incident response, virus scanning, privileged user access, and hardware/software configuration management.
- Experience with developing IT policy, guidance, or procedure documentation supporting cybersecurity accreditations.
- Experience with analyzing, assessing, or implementing NIST SP 800-53 security controls, CCIs, and associated assessment procedures.
- Experience with developing and presenting complex technical information for technical and non-technical audiences.
- Expert familiarity with RMF.
- Excellent written and communication skills.
Preferred:
- Previous supervision and/or participation with cybersecurity Assessment and Authorizations.
- Ability to provide hands-on cyber security tool assistance as necessary.
- Familiarity with cybersecurity tool suite; ForeScout, Avanti, and HBSS.
Created: 2024-09-27
Reference: CIS0002QL
Country: United States
State: Virginia
City: Warrenton
Similar jobs:
-
Security Officer Senior
Virginia Community Colleges in Henrico, Virginia💸 $43000 per year -
Senior Maritime National GEOINT Officer
National Geospatial-Intelligence Agency in Springfield, Virginia -
Probation Officer Senior: P&P District #31 Chesapeake #P3127
Virginia Jobs in Chesapeake, Virginia💸 $55429.00 per year -
Information Systems Security Officer, Senior
Jacobs in Warrenton, Virginia -
Revenue Officer (Senior Program Analyst) - (CTAP Eligibles ONLY)
Internal Revenue Service in Fredericksburg, Virginia -
Senior Information System Security Officer (ISSO) - TS with SCI eligibility, willing to get a Poly, Springfield VA, Immediate Hire
Synertex LLC in Springfield, Virginia -
Senior Associate Vice President and Chief Human Resources Officer
Virginia Jobs in Norfolk, Virginia -
Probation Officer Senior (Team Leader/P&P District #7/Petersburg) #P0748
Virginia Jobs in Petersburg, Virginia💸 $55429.00 per year -
Probation Officer Senior (Sex Offender Specialist): Portsmouth (Eastern Region) #00505R
Virginia Jobs in Portsmouth, Virginia💸 $55429 - $98425 per year -
Senior Operations Officer (SOO)
Office of the Director of National Intelligence in McLean, Virginia -
Probation Officer Senior (Sex Offender Specialist/Team Leader): P&P District #34 Williamsburg #P3408
Virginia Jobs in Williamsburg, Virginia💸 $55429.00 per year -
Senior Action Officer
SAIC in Arlington, Virginia -
Senior Logistics/International Liason Officer
Naval Systems Inc in Crystal City, Virginia -
SAFETY OFFICER, SENIOR
City of Newport News in Newport News, Virginia💸 $60107.42 per year -
Senior Contracts Officer
Virginia Jobs in Botetourt County, Virginia💸 $65500 - $75500 per year -
Senior Contracts Officer
Virginia Community Colleges in Botetourt, Virginia💸 $65500 - $75500 per year -
Senior Procurement Officer (part-time)- Administrative Services
Virginia Jobs in Richmond, Virginia -
Senior Information Systems Security Officer
SAIC in Remote Work, Virginia💸 $80001 - $120000. per year -
Senior Research Program Officer, Precision Health Initiative
Virginia Jobs in Charlottesville, Virginia💸 $95000 - $130000 per year