Job Details

ID #17226776
State Massachusetts
City Lexington
Job type Contract
Salary USD TBD TBD
Source Softworld, Inc.
Showed 2021-07-24
Date 2021-07-24
Deadline 2021-09-22
Category Et cetera
Create resume

Cleared ISSO- Lexington Ma

Massachusetts, Lexington, 02421 Lexington USA

Vacancy expired!

Job Number: 235236

Cleared ISSO- Lexington Ma

Develops and maintains an IS security program and policies for an assigned area of responsibility.Develops and oversees operational IS security implementation policy and guidelines. Monitors allavailable resources that provide warnings of system vulnerabilities or ongoing attacks. Monitorssystem recovery processes to ensure security features and procedures are properly restoredand functioning correctly. Responsible for security assessments, tests, and reviews; ensuringproper measures are taken when an IS incident or vulnerability affecting classified systems orinformation is discovered. Ensures the application of configuration management policies andprocedures for authorizing the use of hardware/software are followed. Ensures systems areoperated, maintained, and disposed of in accordance with security policies and proceduresas outlined in the SSP. Develops and updates the SSP, manages and controls changes to thesystem, and assesses the security impact of those changes. Ensures user activity monitoringdata is analyzed, stored, and protected in accordance with the ITPSO policies and procedures.Develops and maintains POA&Ms in order to identify IS weaknesses, resources and timelines forcorrective actions, and mitigate actions. Ensures all users have the requisite security clearancesand authorization and are aware of their security responsibilities

Assist and Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).

Continuously validate the organization against policies/guidelines/procedures/regulations/laws to ensure compliance.

Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.

Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals.

Track audit findings and recommendations to ensure that appropriate mitigation actions are taken. Recommend resource allocations required to securely operate and maintain an organization's cybersecurity requirements.

Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to key stake holders

Recognize a possible security violation and take appropriate action to report the incident, as required.

Assist the Program Managers and the Information System Security Manager (ISSM) in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report, and Continuous Monitoring Strategy

Ensure systems are operated, maintained, and disposed of in accordance with organization security policies and procedures

Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation

Lead and align information technology (IT) security priorities with the security strategy.

Prepare for and participate in periodic organization compliance assessments

Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.

This role will be performed on - site at MIT LL.

Required Skills

Candidate must be knowledgeable in computer security principles and policies, to include, Security Technical Implementation Guides (STIGs), National Industrial Security Program Operating Manual (NISPOM), NIST 800-53 / Risk Management Framework (RMF), Joint SAP Implementation Guide (JSIG), Intelligence Community Directive (ICD) 503, and DoD Manual 5205.07 Volumes 1- 4.

Candidate must have strong technical skills and be able to respond to off-hours emergencies.

Position requires occasional local and overnight travel.

Education/Professional Certifications

A Master's degree or Bachelor's degree + 4 years overall experience is required

THIRD PARTY AGENCIES, SUBCONTRACTORS, AND RECRUITERS NEED NOT APPLY. Applicants received from firms will not be considered. Subcontracting is not available for this position.

Vacancy expired!

Subscribe Report job