INFORMATION SYSTEMS AUDITOR with Security Clearance

*This is a contingent opportunity Conducts technical cyber and communications vulnerability assessments of computer networks, other technology (OT) systems telecommunications and other communications systems. Duties: * Perform oversight of the development, implementation and evaluation of IS security program policy; special emphasis placed upon integration of existing network infrastructure * Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on any assessment and authorization issues * Evaluate Authorization packages and make recommendation to the AO and/or DAO for authorization * Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required * Advise the Government concerning the impact levels for Confidentiality, Integrity, and Availability for the information on a system * Ensure security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary * Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR * Evaluate security assessment documentation and provide written recommendations for security authorization to the Government * Discuss recommendation for authorization and submit the security authorization package to the AO/DAO * Assess proposed changes to Authorization boundaries operating environment and mission needs to determine the continuation to operate. * Review and concur with all sanitization and clearing procedures in accordance with Government guidance and/or policy * Assist the Government compliance inspections * Assist the Government with security incidents that relate to cybersecurity and ensure that the proper and corrective measures have been taken * Ensure organization are addressing and conducting all phases of the system development life cycle (SDLC) * Evaluate Hardware and Software to determine security impact that it might have on Authorization boundaries * Evaluate the effectiveness and implementation of Continuous Monitoring Plans * Represent the customer on inspection teams Experience: * 5 - 7 years related experience * Minimum of three (3) years' experience in SAP, SCI or Collateral Information Systems (IS) Security and the implementation of regulations identified in the description of duties * Prior performance in the role of ISSO and ISSM Education: * Possess a Bachelor's degree in a Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline. In lieu of a degree, commensurate operational experience may be substituted. Certifications: * Possess IAT Level II certifications and CSSP Analyst computing environment certification as defined and described in Joint Publication 3-13 Information Operations and 3-12 Cyberspace Operations, DoDI 8500.1and DoD 8570.01 and 8570.01-M. Other Requirements : * Possess a working knowledge of computer network architecture and network diagraming. * Possess a working knowledge of Computer Network vulnerability/compliance analysis software. * (Desired) Prior experience supporting DoD Nuclear Command, Control & Communications (NC3) and Defense Critical Infrastructure (DCI). Additional Requirements : * Accept worldwide deployments which include high threat permissive areas presenting some risks to personal safety. * Submit to immunization for worldwide travel. Security Clearance: * Current Top Secret clearance with SCI eligibility Benefits: K2 Group's benefit offerings include: Medical/ Dental/ Vision Insurance; FSA Medical & FSA Dependent Care; Pre-tax 401(k) & ROTH 401(k) plans; Profit Sharing Plan; Life & Accidental Death Insurance; Short Term/ Long Term Disability; Voluntary Group Life Insurance option; Tuition Reimbursement; Job-related Course Reimbursement; Holiday Pay; and Paid Time-Off.