Information System Security Specialist III

Information Systems Solutions, Inc, has an immediate opening for an Information System Security Specialist III to join our rapidly growing team. The Information System Security Specialist III will provide cyber services and solutions, technical support, and management support for NIWC Atlantic Polar Programs (NPP).

Traveling to onsite locations in Antarctica is possible.

Specific duties include but are not limited to the following:

• Maintaining security policies and standards.

• Ensuring compliance throughout the organization.

• Provides Risk Management Framework, circuit/system accreditation, and certification policy services.

• Participate in the development or modification of the computer environment IA security program plans and requirements.

• Helping develop procedures to ensure system users are aware of their IA responsibilities before granting access to DoD information systems

• Recognize possible security violations and take appropriate action to report the incident, as required.

• Ensure IA requirements are integrated into the Continuity of Operations Plan (COOP) for that system or DoD Component

• Ensure IA security requirements are appropriately identified in computer environment operation procedures and collect and maintain data needed to meet system IA reporting requirements.

• Evaluates security solutions

• Provide oversight for the Computer Network Defense-Service Provider (CNDSP).

• Work with system owners to close IAVMs/ICVMs and open plan of action and milestones (POA&Ms) in a rapid fashion, in accordance with DoD. instructions/directives.

Why Work For ISS?
At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Requirements

Clearance Level

None

Certification (IAT Level II)

One of the following:


• CySA+


• Security+ CE


• CCNA - Security


• GICSP


• GSEC

• SSCP

Required Skills

• Five (5) years with a bachelor's degree or seven (7) years with HS/GED of practical experience demonstrating competency in Cybersecurity, Engineering, Test & Evaluation (T&E), or Assessment & Authorization (A&A)/Certification & Accreditation (C&A) related fields.
• Working knowledge of the Risk Management Framework (RMF) process.
• Experience with DISA Enterprise Mission Assurance Support Service (eMASS) and Assured Compliance Assessment Solution (ACAS).
• Capable of evaluating security solutions to ensure they meet security requirements for processing up to classified information and supervising and/or maintaining the operational security posture for an information system or program.
• Experience assisting with or developing system security policies and ensuring compliance with change management and configuration control processes.
• Experience conducting Security Control Assessments (SCAs), including stakeholder interviews, security control testing, evidence review and validation, and assessment documentation.
• Experience developing and maintaining Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Demonstrated leadership ability to guide assessment teams, coordinate with system owners and stakeholders, resolve assessment issues, and ensure assessment activities remain on schedule.
• Ability to interpret and apply security policies, system boundaries, control inheritance, and shared responsibility models within complex enterprise environments.
• Experience supporting Authorization to Operate (ATO) efforts and validating compliance with applicable cybersecurity and regulatory requirements.

Desired Skills

• Ability to organize, prioritize and meet deadlines

• Capable of conveying complex information in a simplistic manner

• Strong critical thinking and problem-solving skills