Information Security Analyst Advisor

Description

The company is a global technology and professional services firm serving US government, defense, and intelligence agencies. It has about 26,000 staff and operates in over 50 countries, with work in AI, cloud, cyber, and software development.

This role supports information assurance for a program, organization, system, or enclave, within the Cyber and IT Risk Management job family.

Responsibilities

• Support the information assurance work of a program, organization, system, or enclave.
• Help senior ISSOs put security policies, standards, and methods into practice and enforce them.
• Draft security policies and standards, coordinate their rollout, and check that they are followed.
• Keep a system or program's day-to-day security in the state it should be, with policies and procedures in place and followed.
• Manage the security side of a system and carry out its routine security operations.
• Evaluate security solutions against the requirements for handling classified information.
• Run vulnerability and risk assessments to support certification and accreditation.
• Manage configuration of security-relevant software, hardware, and firmware, and assess the security impact of each change.
• Maintain records on workstations, servers, routers, firewalls, hubs, and switches, including upgrades.
• Prepare and review System Security Plans, risk assessment reports, C&A packages, and System Requirements Traceability Matrices.
• Support security authorization work under the NIST Risk Management Framework.
• Develop and maintain C&A documentation in line with ODNI and DoD policy.
• Write system security policy and make sure it is followed.
• Support the ISSM in keeping the right operational IA posture for a system, program, or enclave.
• Update the system security plan and other IA documents.
• Manage the user identification and authentication mechanisms of the information system.
• Obtain C&A for the systems under your purview and act as their approval authority.
• Plan and coordinate IT security programs and policies.

Requirements

• Hold a current Top Secret SCI clearance with polygraph, or be able to obtain one.
• US citizenship is required.
• At least 10 years of experience as an ISSO on programs and contracts of similar scope, type, and complexity.
• Experience in at least two of these areas: current security tools, hardware and software security implementation, communication protocols, and encryption techniques and tools.
• A bachelor's degree in computer science or a related field from an accredited college or university is required. Four additional years of ISSO experience may replace it.
• DoD 8570 compliance at Information Assurance Management Level I or higher is required.
• Keywords for the role: computer security, information system security, security information, security requirements, and system security.

Conditions

The role is onsite in Annapolis Junction, Maryland, USA.

The role is scheduled for 40 hours a week, with no travel required.

The likely salary is $114,750 to $155,250. This is not a guarantee. Pay depends on experience, location, and possibly contract terms, and may fall outside this range.

Candidates complete an identity verification process using biometrics and AI, and must be on camera in virtual interviews. The company may take your photo for verification, and by proceeding you consent to the use of your biometric data for that purpose and for security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Flexible scheduling, including full-flex work weeks where possible.
• A 401(k) with company match, where you can contribute pre-tax and post-tax up to IRS limits.
• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• Paid time off for vacation, sick and personal time, holidays, parental, military, bereavement, and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An internal mobility team to help you plan your career.
• Paid education and certifications for professional growth.
• Access to current technology to learn from.