Information System Security Specialist III

Information Systems Solutions, Inc, has an immediate opening for an Information System Security Specialist III to join our Security Control Assessment (SCA) team, in support of the National Science Foundation (NSF) Office of Polar Programs (OPP) United States Antarctic Program.

The Information System Security Specialist III will be responsible for day-to-day cybersecurity operations, maintenance, and support of computer systems and networks. The ideal candidate will have a strong policy compliance background, excellent problem-solving skills, working knowledge of National Institutes of Standards and Technology (NIST) Special Publications (SP Revision 5, 800-39, for Security Control Assessments, and the ability to ensure the reliability and security of IT infrastructure of the General Support System for USA.

Day to Day job is Remote, however – travel to onsite locations in Antarctica are possible. Additionally, quarterly travel to customer site in Charleston, SC four times a year or more.

Job Responsibilities:

• Assessment of security policies, procedures and processes against NIST standards.
• Review of System Security Plans to report on compliance throughout the organization.

• Provide Quarterly Reports of system security metrics.

• Oversee implementation of all stages of the Risk Management Framework

• Provide analysis and overviews of legal compliance documents
• Collaborate with other SCA Team Members to assess the Confidentiality, Integrity and Availability of systems
• Advise Program Management on risk levels and security posture
• Recognize possible security violations and takes appropriate action to report the incident, as required.
• Conduct reviews of system Contingency Plans trough tabletop exercises and simulated live exercises, including review of system Continuity of Operations Plan (COOP)
• Ensure cybersecurity security requirements are appropriately identified in system environment operation procedures and collect and maintain data needed to meet system IA reporting requirements.
• Evaluate system POA&Ms, tracking milestones
• Prepare Risk Assessment Reports

Why Work For ISS?

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Requirements:

Clearance Level

Secret

Certifications (IAT Level II)

One of the following:

• Security+ CE
• GIAC Security Essentials Certification (GSEC)
• Security Certified Network Professional (SCNP)
• System Security Certified Practitioner (SSCP)

And

Must be a U.S. citizen

Required Skills

• Five (5) years with bachelor's degree or seven (7) years with HS/GED of practical experience demonstrating competency in Cybersecurity, Legal Compliance, Assessment & Authorization (A&A) or Certification & Accreditation (C&A) related fields
• Working knowledge of the Risk Management Framework (RMF) process
• Proficiency of evaluating security solutions to ensure they meet legal requirements.
• Excellent interpersonal skills, ability to work in a team centric environment
• Strong verbal and written communication to effectively express concepts, plans, and presentations
• Strong self-starter requiring minimal supervision

Desired Skills:

• Ability to organize, prioritize and meet deadlines
• Experience in Team Leadership role
• Certified Information Systems Professional (CISSP) or pathway to certification.
• Capable of conveying complex information in a simplistic manner
• Strong critical thinking and problem-solving skills
• Able to take proactive measures to prevent problems rather than reactive by nature