Senior Information Systems Security Officer

Senior Information Systems Security Officer (ISSO)

MANTECH seeks a motivated, career and customer-oriented Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This is an on-site position.

The Senior ISSO will leverage their strong technical background and knowledge to support accreditation efforts, to include creating Body of Evidence (BOE) documentation, responding to/implementing/documenting required controls, and completing required tasks and actions.

Responsibilities Include but are not limited to:

• Create, update, maintain, and interpret required Body of Evidence (BOE) documentation to navigate system accreditation processes.
• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of system security configurations and practices.
• Conduct required vulnerability scans, review reports to identify vulnerabilities, and perform comprehensive vulnerability analysis.
• Develop, oversee, and track Plans of Action and Milestones (POAMs) to effectively mitigate discovered security risks.
• Coordinate with system owners, ISSMs, and team resources to diagnose operational issues and implement necessary technology solutions.
• Document and implement plans detailing security postures, proper configurations, and secure remote access capabilities for applications.

Minimum Qualifications:

• 10 + years of related information systems security experience, or a Master's degree with 7 + years of experience.
• Bachelor's Degree or equivalent (6 additional years of experience).
• Must possess one or more relevant industry certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Security Manager - Informatin System Security Management Professional (CISSP-ISSMP), Certified Information Security Manager (CISM), Federal IT Security Professional - Manager (FITSP-M), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), Global Industrial Cyber Security Professional (GICSP), or GIAC Security Leadership (GSLC).
• Significant experience navigating technical accreditation processes, meeting strict security requirements, and creating A&A Body of Evidence (BOE) documentation.
• Familiarity operating standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).
• Proven experience managing complex network documentation, inventorying networks, and working across large technical teams to drive a standardized security agenda.

Preferred Qualifications:

• Possession of a Cloud Certification.
• Hands-on experience utilizing cyber risk and compliance automation tools.
• Self-starter with excellent interpersonal skills, capable of organizing boards and driving change across organizational teams.

Clearance Requirements:

• Current/Active TS/SCI Required.
• Ability to obtain and maintain a polygraph.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, and other equipment.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations.