Information Systems Security Officer

Information Systems Security Officer

Key Concepts Knowledgebase, LLC., is seeking an Information Systems Security Officer for a project at a large NIH support organization. The successful candidate will work with our IT managers, engineers, technicians, and the client to ensure the expectations of both parties are fulfilled in a timely, cost-effective manner.

The responsibilities are as follows:

• The Information System Security Officer will be responsible for the assurance that all systems, components, and services, required by the client, are in compliance with federal security policies, processes, and procedures.
• The ISSO will serve as the principal advisor to the client on all matters, technical and otherwise, including the security of the client's information system.
• The ISSO will work with the IT security team to complete Authority to Operate activities.
• The ISSO will help coordinate and execute all activities related to systems patching and related security compliance in a clinical and scientific research environment.
• The ISSO will work with the government to implement security assessments and authorizations, and ensure that the systems continue to operate at the required intervals when changes are implemented.
• Additionally, the security officer will perform oversight and compliance verification assessment and continuous monitoring, contingency plan development, and evaluation, and all vulnerability scanning and auditing, as necessary.
• The ISSO will also provide recommendations for security processes and procedures improvement.
• The ISSO must document all assessment activities in order to report to senior management- both technical and non-technical personal.
• The ISSO will also create a quarterly security awareness article for the client publication.

Qualifications:

Knowledge, Skills and Abilities:

• Must be detail-oriented, organized, and can work under tight deadlines
• Federal contract work experience

Technical Requirements (required and desired - specify):

• Required-Bachelor's degree in Computer Science, Information Systems, Engineering, Business or other related discipline
• Proven work experience as an ISSO in a government environment
• Security related certification
• Proven in-depth knowledge of information security processes, processes, methodologies, and best practices
• Exceptional written and verbal communication skills, showcasing the ability to articulate technical concepts to non-technical audiences
• Extensive knowledge in relation to traditional and Agile frameworks in a highly dynamic environment
• Experience using SIEM tools: Nessus/Tenable, Appscan, BigFix, JAMf, Cylance, CyberArk, and more
• Extensive experience developing reports and documentation with the purpose of reporting activities
• Extensive knowledge of security systems and ability to serve as a SME on network continuous monitoring tools implementation across networks and ability to recommended solutions as needed to support vulnerability remediation for Windows, Max, Linux and other operating systems
• Ability to provide security expertise on security controls and to conduct security testing and develops assessment of local area network and other components with the purpose of ensuring compliance
• Experience creating and managing Plan of Action and Millstones (POA&M)
• Knowledge and ability to assist with coordination of contingency plan testing for GSSs and other applications
• Experience creating Privacy Impact Assessments and risk assessments
• Experience and ability to perform continuous review of existing systems and making recommendations for optimization
• Desired:
• NIH experience
• Public Trust
• Training and Certifications:
• Must be able to obtain and/or pass a public trust background check.

Full-Time/Part-Time - Full-Time

Location - Bethesda

This position is currently accepting applications.