Information Systems Security Officer (ISSO)

• Provide technical support to the Government PM in overseeing the development of all documentation and coordination for the establishment of the Authority to Operate (ATO) for the Program Offices’ systems.
• Perform the duties of the Lead Information Systems Security Officer (ISSO) for PM TS and subordinate Product Offices.
• Assist the Government with preparing and implementing the Information Systems (IS) accreditation program IAW the DoD Information Assurance Certification, Enterprise Mission Assurance Support Service, certificates of networthiness, including all reports required by the Risk Management Framework (RMF) and the Federal Information Security Management Act (FISMA) of 2002.
• Assist the Government with accrediting and reaccrediting PM TS and its Program Offices systems for theater operations and network connectivity which includes the updating, security hardening and vulnerability scanning of internal hardware (workstations, servers, etc.), software (applications, operating system, databases, etc.) and network devices.
• Assist the Government with establishing and using an enterprise decision structure for cybersecurity risk management that includes and integrates DoD mission areas pursuant to DoDD 8115.01 and the governance process prescribed in this directive.
• Assist the Government with managing the cybersecurity requirements for DoD information technologies through an integrated enterprise-wide RMF consistent with the principles established in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37.
• Assist the Government with satisfying the RMF requirements of Subchapter III of Chapter 35 of Title 44, United States Code, i.e., FISMA.
• Assist the Government in categorizing PM TS and its subordinate Program Offices IS and Platform Information Technology systems IAW committee on national security systems instruction 1253, implement corresponding set of security controls from NIST SP 800-53 using DoD-specific assignment values, overlays, implementation guidance, and validation procedures.
• Assist the Government with identifying resources for implementing the RMF and allocated as part of the Defense planning, programming, budgeting, and execution process.
• Assist the Government to ensure all IT associated with the PM TS and its subordinate Program Offices systems are authorized for operations through enterprise processes for identifying, evaluating, mitigating, and accepting cybersecurity risks.
• Assist the Government in supporting validation of all systems in the PM TS portfolio in accordance with DODI 8510.01 Risk Management Framework and Army Regulation 25-2, Information Management: Army Cybersecurity.
• Assist the Government with developing and maintaining a Plan of Action and Milestones (POA&Ms) in accordance with DODI 8510.01 Risk Management Framework and Army Regulation 25-2, Information Management: Army Cybersecurity to record specific measures planned to correct deficiencies and address known deficiencies in the IS.
• Assist the Government with implementation or oversight of the Defense Information Systems Agency’s (DISA) security technical implementation guides (STIGs) for systems within the PM TS portfolio in accordance with Army Regulation 25-2, Information Management: Army Cybersecurity and DODI 8510.01, RMF.

• Detail-oriented with excellent technical, verbal, and written communication skills.
• Working knowledge of DoDI 5000., * Bachelor’s degree in a related field and at least eight (8) years of experience in the Cyber Security field required.
• An additional two (2) years of experience may substitute degree requirement.
• Defense Acquisition and DOD IAM Level I or II certification per 8570-01 M required.

Travel:

Less than 10% travel is expected for this position.

Work Environment:

This position will be co-located with the customer and other contractors in Government office spaces.

Physical Demands:

Physical demands of this position include ability to:

• Be independently mobile.
• Communicate effectively with co-workers and customers.
• Withstand prolonged periods of sitting at a desk and computer use.

Reasonable accommodation will be provided to enable individuals with disabilities to perform the essential functions.

Position Type/Expected Hours of Work:

This is a full-time position, Monday through Friday. Flexibility around core hours.

QED offers a competitive compensation package for full-time employees. Our total compensation package is value-based and negotiable depending upon the candidate’s specific skills and applicable relevant experience.

Benefits include:

• Paid Time Off (PTO)
• 11 Paid Holidays
• 401(k) Matching
• Medical, Dental & Vision Benefits
• Life Insurance, AD&D, and Short-Term & Long-Term Disability
• Professional Growth Opportunities
• Additional Benefits

Estimated Salary Range: $100,000.00 - $130,000.00, annually. This is not a guarantee of compensation or salary. This represents the typical range for fully qualified candidates for this position based on experience, geographic location, and other factors. The final offer amount may vary.