Bridgeview is currently seeking an Information Systems Security Officer (ISSO) for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details.
TITLE: Information Systems Security Officer (ISSO)
LOCATION: Colorado Springs, CO
COMPENSATION: 140K
BENEFITS & PERKS:
- Educational reimbursement
- Employee stock purchase plan
- Health benefits/Disability benefits/Life and accident insurance/Voluntary benefits/Retirement benefits
- Paid time off and paid holidays
- Parental leave
OVERVIEW
As a Security Administrator, you will build upon your Information Technology (IT) and Information Assurance (IA) / Cybersecurity knowledge to support customers throughout multiple classified computing domains. The Security Admin is responsible for maintaining and implementing all Information System Security policies, standards, and directives to support the assessment and authorization of information systems processing classified information. The candidate should have outstanding verbal, written, and customer relationship-building skills.
HOW YOU WILL MAKE AN IMPACT
- Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards
- Support the Assessment and Authorization (A&A) processes under NIST Risk Management Framework (RMF) for new and existing information systems
- Facilitates the development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Security Impact Analysis (SIA), and support Continuous Monitoring (CONMON)
- Coordinates configuration management of assigned systems; auditing systems to ensure security posture integrity
- Support assessments and test/analysis data to document the state of compliance with security requirements
- Conduct risk assessments and investigations, implement appropriate risk mitigations, and lead all aspects of incident response activities
- Conducts periodic hardware/software inventory assessments
- Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements
REQUIRED EXPERIENCE
- 5+ years of documented experience in conducting security control assessments for one or more Security Frameworks such as Sec+ (IAT II), NIST, ISO 27001, FEDRAMP, and/or PCI-DSS
- Must have a practical DoD/USAF information security policy background with practical / hands-on experience applying RMF processes and principles.
- Experience developing and/or contributing to RMF body of evidence composition, applicable artifacts, and associated control families
- Experience working towards an ATO and ATC
- Must have a strong understanding of AF systems and PC requirements (i.e., a working knowledge of the directives and governing policies governing information systems)
- Must have a practical understanding of AF systems and PC requirements (i.e., a working knowledge of the directives and governing policies governing information systems)
- Clear understanding of audits as they pertain to government information systems security
- Familiarity with data leakage protection technologies
PREFERRED EXPERIENCE
- Certified Information System Security Professional (CISSP)
- Experience entering information in the Enterprise Mission Assurance Support Services (eMASS) or Xacta).
- Experience with cyber security policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
- Experience in assessing and documenting test or analysis data to show cybersecurity compliance
- Experience in utilizing security-relevant tools
EDUCATION
- BS in a STEM discipline or 3-5 years of progressive, relevant experience directly related to information security
- IAT level II as defined in DoD 8570.01-M, Appendix 3
CLEARANCE
- Secret Clearance
ABOUT BRIDGEVIEW
Founded in 2005, BridgeView provides exceptional technology consulting, project augmentation, and placement services that help organizations and technologists achieve their goals. Our ability to evolve with the market and quickly adapt to client environments makes us a unique alternative to the status quo. It’s why we’ve achieved constant growth since the day we opened our doors, attracting well-known companies and expert talent. With a home base in downtown Denver and a team that embodies a work hard, play hard attitude, BridgeView is a personable but professional partner to you. We’ve won awards and we’ve had great success, but nothing is more rewarding than forming genuine connections with business leaders and technologists.