Information Systems Security Officer

Position Summary

MAG is currently looking for an Information Systems Security Officer (ISSO) to provide a variety of services leveraging the Risk Management Framework (RMF) accreditation in Ft. Bragg NC

Services are associated with validation, approval, and sustainment of cybersecurity accreditation packages. In this role, you will perform and analyze a range of ISSO activities and assist with the development and implementation of security policies.

Essential Duties and Responsibilities

Duties include, but are not limited to :

• Gather and translate customer requirements, interact with stakeholders from many areas, and lead efforts to ensure customer products and recommendations will meet customer information security policies in an ever-changing technical environment
• Categorize the IT and the information processed, store, and transmitted by the system based on an impact analysis due to a loss of Confidentiality, Integrity, and Availability (CIA) impacts
• Select an initial set of baseline security controls for the Information System (IS) based on the security categorization; overlay tailoring and supplementing the security control baseline as needed based on an organizational assessment of risk and local conditions
• Assess the security control using the appropriate methods and procedures to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome
• Authorize the IS based on the determination of the risk to the organizational operations, organizational assets, or to individuals resulting from the operation of the IS and the decision that this risk is acceptable
• Monitor the security of the IS on a continuous basis including assessing control effectiveness, documenting changes to the system, conducting security impact analyses of the associated changes, and reporting the security status of the system to appropriate organizational officials on a regular basis
• Review, prepare and update RMF authorization packages Conduct assessments of information security controls to measure the effectiveness of controls and identify any gaps
• Manage remediation efforts and report on the status of control deficiencies
• Provide security expertise to business units and key stakeholders
• Provide timely status updates / reporting on assessments and assigned projects
• Travel as necessary for customer projects, technology expositions, and corporate meetings

Requirements

Minimum Requirements

Knowledge and Skills

Education

Desired Requirements

Other Qualifications